SECURITY

Fail-closed by default

Scan targets are resolved before they reach the queue; private networks, metadata endpoints and unsafe redirects are refused.

BUILT FOR

Organizations scaling automation within policy, role, approval and audit boundaries

BUSINESS OUTCOME

Review and scale discovery, connectivity and action workflows under one governance model.

DECISION CONFIDENCE

Live, in-progress and planned controls are distinct; certifications not held are never claimed.

SSRF preflight

Scheme, hostname and resolved addresses are validated before work is scheduled; private and metadata targets are refused.

The allowed public target stays pinned during execution and every redirect is subjected to the same safety rules.

Page, time and request budgets constrain resource use while control status is published in the Trust Center.