How CyberAgest Works
Forensic-grade pentesting, powered by sovereign AI
From passive reconnaissance to autonomous patching — every layer of our platform is designed for evidence, not guesswork.
Map the attack surface
Reconnaissance
Discover every asset before attackers do. Passive and active recon across domains, subdomains, ports, and services.
Subfinder
CorePassive subdomain enumeration using 30+ sources.
Nmap
CorePort scanning and service fingerprinting.
DNS & WHOIS
CoreDNS record enumeration and WHOIS lookups.
URL Surface Mapping
CoreCrawl endpoints and map the HTTP attack surface.
Virtual Host Discovery
CoreDetect hidden virtual hosts.
TLS / SSL Analysis
CoreCertificate validation and cipher analysis.
Find what matters
Vulnerability Detection
Template-driven detection for known CVEs, injection flaws, and misconfigurations.
Nuclei
Core10,000+ templates covering CVEs and misconfigurations.
CVE Validation
AdvancedConfirm detected CVEs with safe proof-of-concept checks.
SQL Injection Signals
CoreError-based, boolean, and time-based SQLi detection.
XSS Signals
CoreReflected, stored, and DOM-based XSS detection.
Subdomain Takeover
AdvancedDetect dangling DNS records.
WAF Fingerprinting
CoreIdentify Cloudflare, Akamai, AWS WAF.
Specialized coverage
CMS & Platform Scans
Dedicated scanners for WordPress, Drupal, Joomla, and custom web apps.
WordPress
CorePlugin enumeration and vulnerability matching.
Drupal
CoreModule enumeration and SA-CORE matching.
Joomla
CoreComponent enumeration and admin discovery.
API Security
AdvancedOpenAPI discovery and BOLA checks.
Authentication Surface
AdvancedLogin form discovery and MFA detection.
Mobile App Backends
AdvancedAPI endpoint discovery from mobile binaries.
Beyond the perimeter
Cloud & Infrastructure
Cover AWS, GCP, Azure, and Kubernetes misconfigurations.
Kubernetes Scanning
AdvancedAPI server exposure and RBAC weaknesses.
Cloud Account Audit
AdvancedIAM review and exposed secrets.
EASM
UniqueContinuous discovery of internet-facing assets.
SCA
AdvancedDependency analysis for known CVEs.
Container Image Scanning
AdvancedVulnerability scanning for Docker images.
IaC Review
AdvancedTerraform and Kubernetes manifest analysis.
Intelligence, not automation
AI Agents
Multi-provider LLM routing, autonomous patching, and evidence-grounded reasoning.
OmniRoute Engine
UniqueIntelligent routing across OpenAI, Anthropic, Gemini, DeepSeek, K3.
Auto-Patcher
UniqueGenerates secure code patches. Proposal-only.
Repo Fusion
UniqueClones and analyzes repositories using LLMs.
AIGuardrail
UniqueDefends against prompt injection and credential leaks.
Evidence Grounding
UniqueEvery AI answer must cite a specific finding.
Data Sharing Gate
UniqueNo data sent without explicit consent.
Auditable by design
Compliance & Trust
Forensic-grade evidence, sovereign data routing, and enterprise compliance controls.
Execution Attestation
UniqueSHA-256 proof that every scan actually ran.
VPN-Based Scanning
UniqueAll scans exit through ProtonVPN.
SOC2 Access Review
AdvancedAutomated quarterly access reviews.
Dark Web Monitoring
AdvancedContinuous monitoring of breach databases.
Threat Intelligence
AdvancedScheduled harvesting from threat feeds.
Audit Logs
CoreImmutable logs for every action.
What makes us different
Execution Attestation
Every scan produces a cryptographic proof that it actually ran.
Sovereign AI
Route AI workloads to local models or preferred providers.
Data Sharing Gate
No scan evidence leaves without explicit consent.
Arabic-Aware Guardrails
Detects prompt injection in Arabic, English, and Base64.
Frequently asked questions
Ready to see your attack surface?
Run your first scan in under 5 minutes. No credit card required.