Exploited
UK security assurance & intelligence
Scan your external attack surface.
Security headersSubdomainsEmail spoofabilityOrigin exposure
Built by operators. Supported by AI.
The Brief
Today's intelligence
Risk HIGH 522 KEV258 CVEs285 articles52 sources
Analyst read
The NCSC has attributed a zero-click Zimbra phishing campaign to Russian state-backed LAUNDRY BEAR, whilst Chaos ransomware operators deploy a browser-resident RAT and North Korean group Sapphire Sleet compromises the Mastra npm supply.
StratQuad analysis · 24 July 2026 · read the full brief →
Intelligence
Exploited
Intelligence
Advisory
NCSC Blog Feed · 37h ago
UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisations
Read at source ↗Vendor watch
Key vendor security activity over the last seven days.
Microsoft17 · 2 new
Three critical SharePoint Server vulnerabilities are under active exploitation: CVE-2026-50522, CVE-2026-58644, and CVE-2026-25089 now tracked by…
Also activeGoogle 12 +3Amazon Web Services 3Cisco 6Fortinet 3VMware 2
Get the brief at 07:00, every weekday.
The day's UK security intelligence, read and ranked so you start informed: the stories that matter, the IOCs your SIEM needs, and the actions worth taking first.
From recon to report
Every scan produces a result you can act on.
A posture score, findings graded by severity, and clear remediation guidance. On the platform, the full result exports as a PDF report.
Posture score
acme.co.uk
62/ 100
FINDINGS · 18
Fix first
CRITICALAdmin panel exposed without authenticationadmin.acme.co.uk
HIGHOrigin IP exposed behind CDNdev-portal.acme.co.uk
HIGHSPF and DMARC not enforcedacme.co.uk
MEDIUMLegacy TLS 1.0 and 1.1 enabledmail.acme.co.uk
MEDIUMSecurity headers missing: CSP, HSTSwww.acme.co.uk
LOWServer version disclosed in responsewww.acme.co.uk
PDF report
External Security Report
acme.co.uk · 17 Jun 2026
Export · PDF
01
Recon
Map the external perimeter as an attacker would see it, across every host we can identify.
02
Analyse
Findings are scored and graded by severity, with clear remediation guidance for each.
03
Report
A risk assessment aligned to industry frameworks, exported as a PDF report you can hand to a client or auditor.
Multi-vector reconnaissance.
Active scanning and passive intelligence run on every scan, each source feeding a single posture score. The result is a complete picture of the external surface rather than a partial check.
Active scanning
Vulnerability detection
Template based scanning across web, network and cloud surfaces.
Web server analysis
Configuration scanning for known misconfigurations and exposures.
TLS and cipher analysis
Certificate chain validation and protocol downgrade checks.
Content discovery
URL fuzzing with response baseline fingerprinting.
Port scanning
Fast port scanning for exposed services on discovered hosts.
Passive intelligence
Certificate transparency
CT log queries for subdomain enumeration.
Subdomain discovery
Passive discovery across public DNS and archive sources.
Service enumeration
IP and domain intelligence with banner data.
Technology fingerprinting
Detected software and versions across discovered hosts.
OSINT correlation
Cross referencing across public data sources.
URL reputation
Domain reputation checks against recent scan history.
All tools run server side. No agent, no install, nothing to deploy on your infrastructure.
The platform
Take it further with commercial access.
The free scan covers a single domain on demand. Commercial access opens the full platform across your estate and your team.
Your whole estate
Run the complete scan across every domain you add, including the active checks excluded from the free scan.
Audit-ready assurance
Findings and controls mapped to your frameworks, evidence attached, exported as audit-ready PDFs.
Change tracked over time
Re-scan over time and review what has changed between assessments, across multiple estates.
Built for teams
Multiple users, API access, and the daily brief inside your account.