⚡Nuclei
9,000+ community templates — CVE exploitation, exposed admin panels, default credentials, takeovers, misconfigurations.
NEW9k templates
🕷️OWASP ZAP DAST
Active web-app testing — spider + active scan, XSS, SQLi, CSRF, parameter fuzzing against running apps.
NEWDAST
🔍OpenVAS / Greenbone
50,000+ network NVT checks — CVE detection, service version fingerprinting, authenticated deep scans.
NEW50k NVTs
🛡️Vulnerability Assessment
Multi-engine vuln scan: agent + Nuclei + ZAP + OpenVAS + CVE matching with EPSS prioritisation.
VAPT
🌐Network Discovery
Internal port scanning, service detection, banner grabbing, risky-port alerting.
Network
🔒SSL/TLS Analysis
Certificate chain validation, weak ciphers, Heartbleed/ROBOT, expiry alerts at 30/14/7 days.
TLS
📧Email Security
SPF, DKIM, DMARC verification. Header analysis, open relay detection, domain hardening.
Email
🔌API Security
REST endpoint scanning, auth-bypass testing, rate-limit checks, sensitive data leak detection.
API
🌍DNS Security
Subdomain enumeration via crt.sh, takeover detection (Heroku, S3, GitHub Pages), DNSSEC, glue records.
DNS
📝WordPress Scanner
8 WordPress checks — XML-RPC, REST user enum, version disclosure, config backups, debug logs, plugin detection.
NEWCMS
💻Code & SAST
Static analysis across Python, JS, Java, Go, PHP — SQLi, XSS, hardcoded secrets, insecure deserialisation.
SAST
🗄️Database Security
MySQL, Postgres, MongoDB, MSSQL, Oracle, Redis — auth, encryption, version, backup verification.
DB
🧠AI SOC
Autonomous threat triage, MITRE ATT&CK mapping, playbook suggestions, false-positive learning.
AI
📡Threat Intel Feeds
109,000+ live IOCs from abuse.ch (Feodo, URLhaus, MalwareBazaar). EDR event correlation hourly.
109K IOCs
🌑Dark Web Monitoring
HIBP k-anonymity credential checks, domain breach exposure (HIBP Enterprise), automatic SOC case creation.
NEWHIBP
🌐Domain & Brand Monitor
Typosquat variants, DNS resolution checks, CT-log lookalike detection, real-time phishing alerts.
NEWBrand
🔐Certificate Lifecycle
Cert inventory across scope domains, expiry alerts at 30/14/7/1 days, weak-cipher detection.
NEWTLS
📊EPSS Scoring
Live FIRST.org EPSS feed — vulnerabilities ranked by exploit probability, not just CVSS.
NEWEPSS
📋Risk Register
Likelihood × impact scoring, treatment plans, owner assignment, review dates. Auditor-ready PDF export.
NEWISO 27001
📈Cyber Maturity (NIST CSF 2.0)
25-question assessment, 6-domain scoring (govern + identify + protect + detect + respond + recover), 90-day roadmap.
NEWNIST CSF
🤝Vendor Risk Assessment
12-question vendor questionnaire, automated risk scoring, SOC 2 CC9.2 evidence, overdue review alerts.
NEWCC9.2
🎣Phishing Simulation
3 templates (IT alert, password expiry, invoice). Click tracking, awareness landing, department reports.
NEWCC2.2
🎓Security Awareness Training
6 modules: phishing, password hygiene, DPDP basics, IR 101, device security, OWASP secure coding.
NEWTraining
📊Executive Dashboard
CISO-level view in plain English. Posture, risk in rupees, top 5 risks, compliance per framework, 6-month trend.
NEWCISO
🏆Trust Portal
Vanta-style public compliance page. Live scores from continuous monitoring. Share with customers + auditors.
NEWPublic
🪝Outbound Webhooks
HMAC-signed webhooks for 7 event types — vuln.created, sla.breached, dark_web.new, scan.complete, etc.
NEWIntegrations
🔗Public REST API v1
Bearer-token auth, /me /vulnerabilities /assets /incidents /dashboard endpoints. Per-key revocation + scopes.
NEWAPI
🗃️Asset Inventory + CMDB
Asset metadata (owner, criticality, environment, EOL date) + per-asset scan scheduling on hourly/daily/weekly cadence.
NEWCMDB
📥External VAPT Import
Import pen-test findings via JSON. Track remediation, generate evidence that the VAPT was conducted and addressed.
NEWImport
🏷️White-label MSP Reporting
Custom brand name, logo, primary color, footer text on all PDF reports. Per-customer white-label settings.
NEWMSP