Bring application, network-service and TLS assessments into one workspace. Understand your exposed services, investigate potential vulnerabilities, and coordinate the next steps with your team.
Assess running web applications with configurable crawling, passive analysis and optional active testing. Examine affected URLs and response evidence to investigate potential vulnerabilities.
Use an OpenAPI definition to guide API testing. Review endpoint coverage alongside findings so your team can understand what was exercised and identify areas needing further testing.
Configure saved credentials, recorded login and supported SSO flows to assess protected application areas. For supported interactive MFA journeys, a user can complete the OTP step before testing begins.
Use Nmap assessments to discover exposed ports and identify network services within your authorised scope. Review the results alongside application findings to inform further investigation.
Use SSLyze assessments to review certificates, supported TLS protocols and cipher configurations. Investigate weaknesses in the encrypted connections supporting your services.
Track issue status and retain assessment history. Repeat scans after fixes to help teams review remediation and make informed release decisions.
Route risk-acceptance requests to designated risk owners and false-positive reviews to qualified security reviewers. Capture decisions, justification and supporting evidence, with review dates to support oversight.
These approval workflows are planned and not currently available.