2 apps Censys
cvENGINE screenshot thumbnail

cvENGINE

cvENGINE takes a domain name and returns a verdict on which of today's exploited vulnerabilities can actually reach you, with evidence attached. Continuous discovery builds a Shodan-style inventory of subdomains, IPs, ports, products, versions, certificates, and technologies, then rates every CVE as fire, smoke, or ice from real exploitation sources and scores each host from 0 to 100. Read-only validation reproduces a finding and records the exact command used. Optional AI triage sorts matches into confirmed, likely, or needs validation. A live dashboard, a change timeline with screenshot diffs, saved searches with alerts, and one-click PDF reports keep teams current. Sentinels run scans from other machines, including inside private networks, and an optional OpenVAS add-on extends coverage. Hygiene checks cover TLS, email and DNS records, exposed databases, cloud storage buckets, and WordPress sites. Organizations, roles, two-step sign-in, a REST API, and Slack, Discord, Telegram, and Lark alerts support shared use. A bug bounty workbench imports program scope and drafts reports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Deploy
PRISM screenshot thumbnail

PRISM

PRISM consolidates passive reconnaissance, credential leak detection, and network asset mapping into a unified operational dashboard to replace fragmented command-line security tools. Analysts can launch simultaneous multi-source investigations against domains, internet protocol addresses, email mailboxes, phone numbers, and online handles to uncover domain registrations, open network ports, cryptographic certificates, and historical web archives. The platform interrogates threat feeds and leak repositories to expose credential leaks, dark web mirrors, and email routing anomalies with automated SMTP mailbox verification. Cross-platform identity engines crawl thousands of social networks and public registries to correlate aliases, discover leaked commit identities, and trace digital footprints across the web. Discovered assets render into interactive entity relationship graphs alongside geographic internet protocol maps to help investigators visualize infrastructure clusters and ownership links. An automated operational security calculator evaluates exposure vulnerabilities across identity, web, and infrastructure vectors, producing an aggregated risk score with granular hardening recommendations. Scheduled watchlists continually monitor target infrastructure, dispatching webhook notifications to chat channels whenever new subdomains, ports, or credential leaks appear. Investigators can export comprehensive audit dossiers as self-contained HTML files, styled PDF documents, or structured spreadsheets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Deploy