Risk & Exposure Intelligence platform Features

Enumerate live hosts across IPv4 addresses, CIDR ranges, and IP ranges. Three discovery modes — ICMP Only, Smart , or Aggressive — with automatic system type fingerprinting for each discovered host.

Full attack surface assessment combining TCP port scanning with domain intelligence. Produces structured findings with threat narratives, business impact, and remediation steps per open service.

Fast, profile-based port scanning against a specific host. Three scan profiles: Quick, Standard, Full.

Comprehensive domain assessment within Exposure Scans: email security posture, brand abuse permutation detection, SSL/TLS certificate inspection, and HTTP technology stack fingerprinting.

Automatically maps every open port and service finding to the corresponding MITRE ATT&CK technique ID, tactic (Initial Access / Lateral Movement / Credential Access / Discovery), and affected asset count — across all assessments.

Enrich findings with per-finding AI analysis using Local AI, or Cloud AI. 

AI mode can be enabled or disabled independently of scanning.

Push assessment findings directly to Splunk, Wazuh, Microsoft Sentinel, Elastic SIEM, and IBM QRadar. 

Generate professional PDF reports from any scan or discovery session. Reports include all findings ranked by risk, threat narratives, business impact, remediation guidance, and an exposure summary. Trial reports carry a watermark.

Security teams scan internal CIDR ranges (10.x, 192.168.x) to identify exposed databases, remote access services, and legacy protocols (Telnet, FTP, NetBIOS) that violate hardening policy — generating PDF evidence for the audit record.

SOC teams run scheduled Exposure Scans against perimeter assets and push findings directly to Splunk or Elastic SIEM — creating a real-time record of new exposures that can trigger correlation rules and alerts.

Pentesters use Host Discovery to enumerate live assets within scope before launching targeted scans. MITRE ATT&CK technique mapping helps align the recon phase output directly with the attack path documentation in the engagement report.

Red teams run Exposure Scans against external domains to identify misconfigurations (weak TLS, missing HSTS, open SMTP relay, no DMARC), detect brand-abuse typosquat domains registered by third parties, and map the target's web technology stack.

Compliance teams run quarterly network exposure assessments mapped to MITRE ATT&CK to satisfy threat modelling requirements under NCA, ISO 27001, and PCI-DSS frameworks. PDF reports serve as artefacts in the evidence pack.

MSSPs deliver REI-based network exposure assessments to clients — running scans on-premise in the client environment, generating branded PDF reports, and pushing findings to the client's SIEM without data leaving the client perimeter.