Workflow — 01
Define your scope & assets
Add domains and digital assets, and verify authorization before starting external reconnaissance.
Continuous Recon Mode Active
Find vulnerabilities in your network before attackers do.
In minutes, without sending your data to any third party. AI-powered security scans, NCA ECC / SAMA aligned reports, and continuous monitoring.
CyberAgest / Asset register1 / 3
Explore more
How long would an attacker need for your domain?
A real check of your domain's public configuration in about 60 seconds, no sign-up. The score summarizes publicly available settings. It is not a penetration test, nor a security or compliance certificate.
Core capabilities
All-in-one digital asset security platform
From attack surface recon to compliance auditing — everything in one platform.
External Attack Surface Mgmt
Continuous automated discovery of subdomains, cloud services, and open ports.
AI-assisted review engine
Assisted finding analysis and remediation drafts subject to human review.
Continuous Compliance (CTEM)
Report templates aligned with NCA ECC, SAMA CSF, ISO 27001, and SOC 2 requirements.
Identity & Cloud Posture (CIEM)
AD and Cloud IAM attack path graph analysis combined with Kubernetes security posture.
Executive & Technical PDF Reports
Board-ready reports with CVSS scoring, attack maps, and remediation roadmaps.
Configurable monitoring & alerts
Email and workspace-configured channel alerts when enabled.
Distinct Architecture
Why Security Leaders Choose CyberAgest
Structured scanning and analysis capabilities, with human review required before remediation is adopted.
AegisGPT-assisted finding analysis, with human review before any action.
Enterprise Hybrid: External Agentless EASM + Lightweight On-Prem Identity Collector.
Cloud Identity & Kubernetes Attack Path Graphing (CIEM & KSPM) mapped into Neo4j.
Logical multi-workspace isolation and access controls according to approved configuration.
Documented capabilities2026 Standards
Feature
CyberAgest
Authorized controlled scanning
✓
Attack-surface management
✓
Identity-path mapping when configured
✓
Logical workspace isolation
✓
Report-to-framework mapping
✓
Verified Subscription Tiers
Invest in Continuous Cyber Immunity
Start free and scale as your operations grow.
Most Popular
Pro
For growing security teams and startups.
$990.00/yr (Billed Annually)
- Up to 10 workspaces
- Up to 30 scans/month
- Advanced Nuclei Scanning
- AI Risk Scoring
- Executive & Technical PDFs
- Scheduled Background Workers
Business
For business teams requiring continuous CTEM and governance.
$2,990.00/yr (Billed Annually)
- Up to 300 scans/month
- Continuous CTEM
- 3 Compliance Mapping Frameworks
- Email Alerts and configured Webhooks
- 25 Team RBAC Users
- Priority Support
Enterprise
For complex multi-cloud infrastructures and identity security.
$4,990.00/yr (Billed Annually)
- AI-driven Verification
- Identity Attack Paths (Neo4j)
- Dedicated Worker Nodes
- FIDO2 / Passkey MFA
- SCIM/SSO Integration (In Development)
- Multi-Region Nodes
Frequently Asked Questions
Everything You Need to Know About CyberAgest
How does CyberAgest reduce the operational impact of scans?+
The platform supports scoped, authorized, time-bounded scans. It cannot guarantee zero operational impact; customers must review the scan scope and plan before execution.
Is CyberAgest aligned with NCA and SAMA cybersecurity frameworks?+
The platform helps organize evidence and map findings to selected NCA ECC, SAMA CSF, and ISO 27001 controls. This mapping is not a compliance certification or independent audit.
How does continuous CTEM differ from periodic manual pentests?+
Traditional pentests capture only a point-in-time snapshot. CyberAgest Continuous Threat Exposure Management (CTEM) autonomously maps new subdomains, ports, and code changes 24/7.
What deployment options are available for enterprise customers?+
Cloud deployment is available by plan. SSO, SCIM, and webhook integrations require separate configuration and operational approval and are not guaranteed for every plan until documented in the customer contract.
Ready to validate your attack surface?
Register your domain and deploy continuous verification tasks instantly.