Home / Services / Security Inspect / Platform Security Tester
Security Inspect ／ Vulnerability assessment for servers and network devicesFind weaknesses in your servers and devices,
from the inside.
Platform Security Tester assesses servers and network devices from a runner you place in your own network. Beyond open ports and services, it logs in over SSH, WinRM and SNMP and matches installed packages, programs and device OS versions against each vendor's security advisories. Scans run only within ranges a CyberForces operator has approved.
Challenges
Sound familiar?
Out of reach from outside
Servers and devices on internal networks are often left out of external assessments, so missed updates go unnoticed.
Version numbers mislead
Linux distributions often backport fixes without changing the version, so the version seen from outside causes false alarms and misses.
Too many hosts to track
Keeping track by hand of unsupported OS and software, and of servers that installed updates but never restarted, does not scale.
Features
Platform Security Tester key features
01From inside your network
A Docker container runner sits in your network and scans only the approved ranges. Its own firewall blocks traffic to anything outside them.
02Ports and services
Identifies live hosts, open ports and service versions, and matches them against known vulnerabilities. CISA KEV and EPSS show what to fix first.
03TLS and SSH settings
Checks for legacy protocols, expired or untrusted certificates and weak algorithms.
04Linux authenticated scans
Logs in over SSH, lists installed packages and matches them against the distribution's security advisories. Supports Debian, Ubuntu, the RHEL family, Amazon Linux, SUSE Linux Enterprise Server and Alpine.
05Windows authenticated scans
Logs in over WinRM and matches the OS build against Microsoft's fixes, along with installed programs, Office and SQL Server. Domain accounts can also use Kerberos.
06Network devices
Reads the OS version of FortiGate, Cisco, Juniper, Palo Alto Networks and other devices over SNMP and matches it against known vulnerabilities.
07End of life and pending restarts
Detects OS and software past or near end of life, and servers that installed a new kernel or updates without restarting.
08Recurring scans and inventory
Schedule scans per target and get new critical and high findings by email, Slack or webhook. Search the software read by past scans by name and version, without scanning again.
Specifications
Scope and delivery
| Targets |
|
|---|---|
| Deployment |
|
| Method |
|
| Output |
|
| Pricing |
|
Please note: Currently available on a limited basis; please contact us to use it. Scans stay within approved ranges, and approvals expire.
Getting started
Getting started
Start a runner
Start the runner in your network with the command shown in the console.
Get the range approved
Register the IP ranges and request approval; a CyberForces operator approves them.
Scan and review
Start a scan and review findings and recommended fixes in the console and the report.
FAQ
FAQ
Do you install anything on the target servers?
No. The runner runs on a Docker host you provide. It logs in to targets with a dedicated unprivileged account and only reads information. No root or administrator rights are needed, and nothing is changed.
Do we hand over private keys or passwords?
No. Keys and passwords stay in your environment (the runner's volume, AWS Secrets Manager, Azure Key Vault or Google Cloud Secret Manager). CyberForces stores only where they are kept, and the runner reads them at scan time.
What is sent to CyberForces?
Findings and host information: open ports, the OS, and the names and versions of Linux packages and Windows programs. Names and versions are stored so the software inventory can search them. Vulnerability matching runs on the runner.
Does the price change with the number of scans?
No. The price depends on the number of hosts assessed in the month, and a host counts once however often it is scanned.
Works well with
Platform Security Tester — details and demo requests
Our team will explain deployment options and pricing for your environment.