CZ Sentinel platform Features

 Register and manage an unlimited portfolio of domains with brand names, criticality levels, tags, and configurable monitoring schedules. Full CRUD with domain validation and duplicate detection.

Automated enumeration of subdomains across your registered assets. Unique subdomain count tracked per asset and surfaced in the dashboard as a key attack surface metric.

Deep inspection of TLS certificates — expiry, weak ciphers, mismatched domains, and chain validation issues. Flags certificates that expose your infrastructure to interception or trust warnings.

Full DNS record enumeration combined with WHOIS registration data. Identifies dangling DNS entries, domain registration anomalies, and infrastructure exposure patterns.

Correlates domain and IP reputation. Surfaces malicious verdicts, CVEs, and open risky ports.

Checks your domains against breach databases to identify leaked employee credentials and email exposures that could enable account takeover or targeted phishing attacks.

Discovers publicly exposed email addresses associated with your domain — a common attack vector for spear-phishing and targeted social engineering campaigns.

Finds publicly accessible sensitive documents indexed by search engines or left exposed on web servers — PDFs, spreadsheets, and configuration files that should not be public.

Checks whether your organisation or domain has been listed by known ransomware groups on leak sites — providing early warning before public disclosure.

Generate documented evidence of external attack surface assessments to support NCA ECC control requirements around asset management and vulnerability management — with timestamped scan sessions and exportable findings.

Continuously monitor external exposure for financial institutions subject to SAMA Cyber Security Framework — track risk trends, generate executive reports, and demonstrate proactive threat monitoring posture.

IR teams use CZ Sentinel to establish an attack surface baseline before and after incidents — identifying how attackers may have gained initial access through exposed credentials, open ports, or leaked secrets.

MSSPs onboard client domains into Sentinel, run scheduled automated scans, and deliver branded executive PDF reports as part of a managed external risk monitoring service offering.

Red teams use Sentinel to validate their reconnaissance findings against what the client can already see — ensuring penetration test scope reflects the real external attack surface.

CISOs use the risk dashboard and executive HTML reports to communicate external exposure trends to board-level stakeholders — overall risk score, critical findings count, and remediation progress over time.