Security overview

Follow the assessment workflow. Each step opens its own page; navigation never starts a scan.

Scope authorizations

Open an existing request to read its documents, reply or record a decision. An approval never starts a test.

Prepare assessment

Choose the campaign, activity and targets. Saving a plan does not start a scan.

Plan from a written request

Extract explicit networks from your request. Review and launch remain separate steps.

Review & launch

Verify the profile, targets and expiry. Launch creates a job; authorization, phase approval and testing windows still apply.

Manual profile launch

For operators selecting a specific scanner profile. Unlike plan preparation, submitting this form creates a job.

Job status

Real-time progress, evidence and results for the jobs available to your account.

Asset registry

Consolidated infrastructure, ownership, exposure and evidence-backed drift across assessments.

Finding registry

Recurring exposure, regressions, accepted risk and verified closure across the client history.

Exposure watch

Recurring authorised assessments, drift tracking and retest baselines.

Network Tools

Fast DNS, mail, reputation and path diagnostics with saved evidence.

Downloads

Install the internal audit collector as a native package or deploy the prepared VMware appliance.

Internal assessment connectivity

Configure an encrypted route or an outbound-only sensor for the authorised internal scope.

Clients

Manage client access. Assessment scope and testing windows are configured separately in Campaigns & scope.

Campaigns & scope

Choose a campaign to review its targets, exclusions and testing windows. Campaign approval does not replace scope authorization.

Create campaign

Record the client and boundaries. This does not create an authorization or start an execution.

Access profiles

Reusable subscription profiles, features and platform limits.

Audit team

Create auditors, delegated team leaders or full administrators. Team leaders manage only the auditors they create and monitor those auditors' work.

Workers Setup

Register a server, verify SSH, install selected roles, then allocate compatible jobs. Running and assigned jobs block reassignment or deletion.

System status

Live control-plane, worker and external-source availability.

Evidence & validation

Observed relationships, reviewable objectives and separate execution approval. Planning does not contact a target.

OSINT / Dark-web search

Search only assigned client objects. Public-source observations and dark-web index matches are leads, not proof of compromise.

Administrative OSINT / Dark-web research

Passive research or explicitly authorized public metadata checks, separate from assigned client objects.

My account