Network and web scans
Knowing that a service is exposed is not enough — you still need to know what state it is in. Exposia combines port scanning, service detection, web analysis and TLS verification to give you an accurate and up-to-date picture.
Benefits
- Full port scan Detect all open ports on your targets, even on non-standard ranges, with identification of associated services.
- In-depth web analysis Technology detection, analysis of HTTP headers, verification of exposed forms and application entry points.
- Verifying TLS certificates Detect expired, misconfigured, or weak algorithm certificates before they become an incident.
- Plusieurs moteurs Selon le profil choisi : Nmap, Nuclei, ZAP, Wapiti, testssl, OpenVAS. Un profil n'enchaîne pas forcément tous ces moteurs.
How it works
- 1. Select your targets Choose the targets to scan from your inventory or directly enter an IP or domain.
- 2. Choose a scanning profile Quick scan, full scan or custom pipeline depending on the desired analysis depth.
- 3. Results feed into findings Each vulnerability detected is recorded in your findings with severity, description and associated asset.
Frequently asked questions
Which ports are scanned by default?
Standard profiles cover common ports. Advanced profiles can cover all 65,535 ports.
Does web scanning require an agent installed?
Non pour les scans externes classiques. Pour les réseaux internes (LAN), l'Agent local Exposia (1 inclus dans le Pro) permet de scanner derrière le pare-feu.
How often should I scan?
We recommend at least a weekly scan; daily for exposed critical targets.