Platform
xSpctr finds everything you expose to the internet, ranks what is really at risk and keeps watch every day, so your team fixes the right thing first.
Live tour
A replay of xSpctr with a demo organisation: the overview, the inventory, a host and its possible CVEs, and a finding on its way to fixed.
Capabilities
Each capability works on the same daily inventory, so nothing falls between tools.
Every domain, host and service.
What is really at risk, fixed first.
Daily checks, critical alerts.
The inside view, via appliance.
SPF, DMARC and DNSSEC.
Reports and evidence for audits.
Built in
Critical only, recommended or custom.
Summary, findings and inventory.
Inventory and audit evidence.
Invite colleagues as admins or members.
Every decision, with who and when.
Hide what is not yours, undo any time.
Questions
Both. It starts from the outside, like external attack surface management (EASM): what an attacker can see on the internet. With the optional appliance it also covers your internal networks, which is why we call it attack surface management.
A scanner checks the list you give it. xSpctr first finds what belongs on that list, keeps it current every day and ranks the results by real-world risk, so you fix the right thing first.
Yes, with the optional appliance. It runs inside your network, connects outbound only and reports into the same inventory as your external surface.
Tell us about your organisation and we will set you up.