Vulnerability Management
Track, triage, and remediate security vulnerabilities from penetration tests, cloud integrations, vulnerability scans, and manual entry -- with risk scoring, SLA enforcement, Kanban and timeline views, and integrated external scanning via HostedScan.
Vulnerability Scanning
Run managed vulnerability scans against configured targets using preset-based scan profiles powered by HostedScan -- with scheduling, authenticated scanning, fingerprint dedup, triage workflow, AI analysis, and promotion to the Vulnerability Register.
Endpoint Management
Monitor device compliance through MDM integrations -- track encryption, firewall, passcode, and OS version enforcement across your fleet with compliance policies, policy exceptions, posture dashboards with trends, and evidence export for auditors.
Phishing Simulation
Run simulated phishing campaigns to test employee security awareness -- with built-in email templates, credential capture landing pages, click and report tracking, department comparison analytics, and auto-remediation training for clickers.
Incident Response
Track, investigate, and resolve security incidents following the NIST SP 800-61 lifecycle with a 5-tab workspace, NIST phase stepper, playbook-driven runbooks, breach notification tracking, AI-assisted after-action review, and remediation management.
Security Awareness Training
Build and deliver security awareness training with a curated module library, AI generation, multi-content campaigns (training + policies + coding challenges), magic-link delivery, auto-enrollment, quiz retake limits, email delivery tracking, completion evidence attestation, and an analytics dashboard with KPI cards and campaign progress.
Tabletop Exercises
Plan and conduct incident response and BC/DR tabletop exercises with AI-generated scenario injects, role-based participant management, live exercise facilitation with phase transitions and timers, structured response collection, post-exercise observations, and AI-generated after-action reports with compliance mapping.
Infrastructure
Monitor cloud infrastructure through automated AWS inventory scanning, interactive network diagrams with freestyle mode, resource classification, drift detection with severity-based alerts, security finding review with risk creation, and network access reviews -- all generating compliance evidence.
Coding Challenges
Interactive secure coding exercises evaluated in an isolated Lambda sandbox -- with AI generation, OWASP-mapped challenges across JavaScript, Python, and SQL, automated test verification, attempt tracking, AI coaching hints, and integration into training campaigns.