See the websites, endpoints, networks, and assets behind your cybersecurity risk.

Website security scanning

Checks against public-facing websites, with evidence and recommended remediation on every finding.

• TLS and certificate conditions
• Security headers
• HTTP Strict Transport Security
• Content Security Policy
• Clickjacking protection
• MIME-type protection
• Referrer policies
• Potentially dangerous exposed services
• Exposed environment files
• Exposed source-control directories
• Exposed backup files
• Email-domain controls: SPF, DKIM, DMARC, MX records
• Common security weaknesses

NoteEach result carries a title, severity, description, technical evidence, recommended remediation, status, deadline, and retest workflow. Website scanning is not a substitute for manual penetration testing.

Finding-to-ticket workflow

Technical findings become managed remediation items with owners, due dates, and retests.

• Run or receive a security scan
• Identify a finding
• Review evidence and severity
• Create or associate a ticket
• Assign responsibility
• Track due dates
• Apply remediation
• Request a retest
• Confirm whether the issue remains
• Close or reopen the finding

Windows endpoint agent

A Windows installer and service that reports endpoint telemetry to the vendor’s tenant.

• Windows installation package
• Windows Service operation
• Secure agent identity
• Vendor-scoped registration
• Agent heartbeat
• Endpoint telemetry
• Operating-system and host information
• Installed-software inventory with versions
• Service information
• Network-interface information
• Local security observations
• Vulnerability signature checks for selected software
• Scan-result reporting
• Remote scan-target retrieval

NoteEndpoint visibility requires installation and authorization of the CSpace 360 Windows agent.

Network discovery

Devices visible from an installed Windows agent, stored in the vendor’s inventory.

• Discover devices visible from an installed Windows agent
• Collect IP addresses
• Collect MAC addresses where available
• Identify open ports
• Observe network services
• Store discovered devices in the vendor’s inventory
• Maintain vendor-level tenant isolation
• Validate reported device data
• Continue processing valid devices if one reported device is malformed

NoteDiscovery is performed from an authorized endpoint inside the customer network. Identification is based on available network observations, results may require review and classification, and discovery does not guarantee identification of every device.

Network security scanning

Scans of authorized targets that produce network findings for remediation.

• Use authorized scan targets
• Examine reported devices
• Detect selected exposed ports and services
• Generate network findings
• Associate results with the correct vendor
• Track scan activity and outcomes
• Feed findings into remediation workflows

NoteNetwork security scanning is not marketed as a complete vulnerability assessment unless the deployed scan engine and scope support that claim.

Asset inventory and CMDB

Central asset records that connect ownership, criticality, findings, and tickets.

• Central asset records
• Endpoint inventory
• Network-device inventory
• Website and domain inventory
• Software and service records
• Asset ownership, status, criticality, and environment
• Relationships between assets
• Findings and tickets linked to assets
• Client and vendor ownership
• Search, filtering, and reporting

External attack surface

A prioritized view of public domains, websites, services, and their changes.

• Public domains and websites
• Exposed services
• Certificate information
• DNS observations
• Security-header posture
• External findings
• Change tracking
• Prioritized exposure review

Vulnerability management

Consolidated vulnerability records with ownership, due dates, and closure evidence.

• Consolidated vulnerability records
• Severity and priority
• Affected assets
• Detection source
• Remediation guidance
• Ownership and due dates
• Exception handling
• Retest results
• Closure evidence
• Portfolio-level vulnerability trends