IntruforceSeguriScan — security monitoring platform
Keep track of security issues in your websites, online systems and exposed company data.
For regular checks, clear priorities and a view of what still needs attention.
See how SeguriScan works →Know your cyber risks. Focus on what matters first.
SeguriScan helps you discover internet-facing assets, identify security weaknesses and exposed credentials, and monitor changes over time. Understand which risks need attention and what your team can do about them.
- Nothing to install
- No access to your internal network
- No active testing without your approval
See your external security risks at a glance. Get an overview of your external assets, security findings and risk levels. See what needs attention first and monitor changes over time.
SeguriScan · my.intruforce.comDemo company, sample dataSample data
SeguriScan dashboard: assets, open services, findings by severity, data leaks and the threat level for each category
Dashboard
What needs attention now and how the calculated threat level is distributed across categories.
Services and ports280HTTPS 70HTTP 8−1SSH 50Mail 20Other 6+1
Threat level by category
compared with 16 Oct 2026Lower is better
Current cycle since 22 Octas of 23 Oct 2026
6.4
6.4−0.47.6
7.6−0.14.2
4.20.05.8
5.8+0.34.8
4.8−0.93.9
3.9−0.1Needs attention 4 of 40
A server card: risk score, open ports, linked domains and the first thing to fix
| Asset | Risk | Issues | Ports | Technologies | OS | |
|---|---|---|---|---|---|---|
| 9.6 | 11 | 443 | FortiOS | FortiOS 7.2.5 | ||
| 9.4 | 1 | — | — | — | ||
| 9.3 | 22 | 223306920010250 | MySQLElasticsearchOpenSSH+1 | Debian 12 | ||
| 9.1 | 13 | — | — | — | ||
| 8.9 | 2412 | 2280443 | Apache HTTP ServernginxOpenSSH+6 | Ubuntu Linux 22.04 | ||
| lk.example.com | ||||||
| shop.example.com | ||||||
| www.example.com | ||||||
| 8.8 | 1 | — | — | — | ||
| 8.4 | 21 | 2244390901567227017 | Apache TomcatJenkinsGitLab+6 | Ubuntu Linux 22.04 | ||
| 7.9 | 11 | — | — | — | ||
| 7.8 | 1 | 25443587993 | PostfixDovecotnginx+1 | Ubuntu Linux 20.04 | ||
| 7.6 | 1 | — | — | — | ||
| 7.5 | 1 | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| 21 | 80443 | — | — | |||
192.0.2.20 IPv4 Available Confirmed
www.example.com
Risk8.9High
Open portsUbuntu Linux 22.04Critical (2)High (4)Medium (1)Low (2)
Critical2open findings
SurfacePorts: 3elevated importance: 2
CertificatesTLS ok
What to close first Ports
Web login forms Elevated importance 80443
Public login forms — enable brute-force protection and MFA.
Domains 3
An issue: priority P1, critical severity, a deadline, a technical description and a fix recommendation
| Prio. | Finding | Asset | EPSS | CVSS | Sev | Confidence | CVE | Checked |
|---|---|---|---|---|---|---|---|---|
| P1 | www.example.com | — | 9.8 | C | T2 | CVE-2026-109618 | 22 Oct 2026 | |
| P1 | lk.example.com | — | 9.8 | C | T1✓ | — | 22 Oct 2026 | |
| P1 | 192.0.2.25 | — | — | C | T1 | — | 22 Oct 2026 | |
| P2 | example.com | — | — | C | T2 | — | 22 Oct 2026 | |
| P2 | www.example.com | — | — | H | T1 | — | 22 Oct 2026 | |
| P1 | vpn.example.com | 83.4% | 9.8 | C | T2 | CVE-2024-21762 | 22 Oct 2026 | |
| P2 | 192.0.2.25 | — | — | H | T3 | — | 22 Oct 2026 | |
| P2 | cdn.example.com | — | 8.1 | H | T2 | — | 22 Oct 2026 | |
| P2 | www.example.com | — | 7.5 | H | T1 | — | 22 Oct 2026 | |
| P2 | shop.example.com | — | 7.5 | H | T1✓ | — | 22 Oct 2026 | |
| P2 | www.example.com | — | 7.5 | H | T1 | — | 22 Oct 2026 | |
| P2 | 192.0.2.25 | — | — | H | T2 | — | 22 Oct 2026 | |
| P2 | 192.0.2.21 | — | — | H | T2 | — | 22 Oct 2026 | |
| P3 | 192.0.2.21:9090 | — | — | M | T2 | — | 22 Oct 2026 | |
| P3 | example.com | — | — | M | T1 | — | 22 Oct 2026 |
Dangerous exposure catalogSW-EXT-EXPOSURE-11
Dangerous exposure: MySQL database (3306)
192.0.2.25
PriorityP1Immediately
CriticalT1 · confidence
192.0.2.25
Age3 d.due by 27 Oct 2026
Exploitationnone
Detected20 Oct 2026checked 22 Oct 2026
Description
The MySQL server answers on port 3306 from the internet. Anyone can try passwords against it, and any flaw in the server is reachable directly.
Recommendations
Close port 3306 on the perimeter. If remote access is needed, allow it only from known addresses or through the VPN.
A known flaw in a VPN server, flagged as used by attackers, with the deadline to fix it
| CVE | Product | Asset | Ports | CVSS | Sev | Tier | Published |
|---|---|---|---|---|---|---|---|
| KEV | fortios7.2.5 | vpn.example.com | 443 | 9.8 | C | T2 | 9 Feb 2024 |
| KEV | jenkins2.426.1 | ci.example.com | 443 | 9.8 | C | T2 | 24 Jan 2024 |
| KEV | tomcat9.0.65 | api.example.com | 443 | 9.8 | C | T2 | 10 Mar 2025 |
| fortios7.2.5 | vpn.example.com | 443 | 9.8 | C | T2 | 12 Mar 2024 | |
| php8.3.24 | www.example.com | 80443 | 9.8 | C | T2 | 21 Oct 2026 | |
| php8.3.24 | www.example.com | 80443 | 8.1 | H | T2 | 21 Oct 2026 | |
| http_server2.4.54 | www.example.com | 80443 | 9.8 | C | T2 | 1 Jul 2024 | |
| http_server2.4.54 | www.example.com | 80443 | 9.8 | C | T2 | 7 Mar 2023 | |
| openssh8.9p1 | www.example.com | 22 | 8.1 | H | T2 | 1 Jul 2024 | |
| openssh9.2p1 | 192.0.2.25 | 22 | 8.1 | H | T2 | 1 Jul 2024 |
CVE-2024-21762CWE-787
vpn.example.com
CVSS9.8Critical
CriticalT2 · confidenceKEV · ransomwareexploitation: confirmedEPSS 83.4%
vpn.example.com
CVSS9.8v3.1
ExploitationKEVEPSS 83.4%
ConfidenceT2observed
Published9 Feb 2024
Product and asset
- Product
- fortios · fortinet
- Version
- 7.2.5
- Asset
- vpn.example.com
- State
- Candidate
- Ports
- 443
External sources
NVD · CVE-2024-21762
CISA KEV ransomware
Used in ransomware campaigns. Active exploitation — must be resolved as soon as possible.
- Resolve by
- 16 Feb 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Data leaks: leaked accounts of staff and customers, whether a password leaked too, and where it turned up
Data Leaks 17
access by grant| Account | Password | Source | Sev | Fields | Found |
|---|---|---|---|---|---|
| a.m*****@example.comStealer log · 22 Oct 2026 | yes | Stealer log | C | emailpasswordURL | 22 Oct 2026 |
| j.r****@example.comStealer log · 22 Oct 2026 | yes | Stealer log | C | emailpasswordURL | 22 Oct 2026 |
| s.p*****@example.comCombolist 2026-08 · 14 Oct 2026 | yes | Combolist 2026-08 | H | emailpassword | 14 Oct 2026 |
| d.l****@example.comStealer log · 7 Oct 2026 | yes | Stealer log | H | emailpasswordURL | 7 Oct 2026 |
| it-support@example.com✓travelbook.example breach · 23 Sep 2026 | yes | travelbook.example breach | H | emailpassword hash | 23 Sep 2026 |
| m.g*****@example.comStealer log · 9 Sep 2026 | yes | Stealer log | H | emailpasswordURL | 9 Sep 2026 |
Passwords and hashes are shown masked. Access to full values is enabled for the organization on request.
The reports list: one report per check, downloadable as Word or Excel
Ready perimeter reports — one per check. Each can be downloaded as DOCX or XLSX.
| Report | Check period | Status | |
|---|---|---|---|
| Perimeter report of 22 Oct 2026 | from 22 Oct 2026 | In progress | |
| Perimeter report of 16 Oct 2026For the period · built 16 Oct 2026 · DOCX, XLSX | 15 Oct 2026 — 16 Oct 2026 | Completed | |
| Perimeter report of 9 Oct 2026For the period · built 9 Oct 2026 · DOCX, XLSX | 8 Oct 2026 — 9 Oct 2026 | Completed |
Our specialists’ certifications
Built on cybersecurity expertise
SeguriScan is developed by a team with hands-on experience in penetration testing, vulnerability assessment and security audits. Our specialists bring their practical security expertise to the platform’s development and analysis of security findings.
- OSCP
- OSWP
- OSWA
- HTB CPTS
- C|EH Master
- ISO/IEC 27001 Lead Auditor
Two ways to work with IntruForce.
Monitor your company's online systems with SeguriScan. For a closer look at a specific website or system, work with our security specialists.
Expert security testing
Have specialists test a website, application or system within an agreed scope.
Available separately, without a SeguriScan subscription.
View available assessments →Problems that can go unnoticed.
A forgotten website, an open login page or a lookalike domain can create a problem for your business. Knowing about it gives your team a place to start.
An old website is still online.
A campaign has ended, but its website is still accessible from the internet. It may have security issues worth checking.
A login page is open to the internet.
Anyone who finds it can try passwords against it. Your team can decide whether it should be reachable at all.
Someone registers a domain similar to yours.
It could be used to impersonate your company. It is worth checking who uses it and for what purpose. See sample look-alike domains →
Understand the issue. Agree on the next step.
How SeguriScan works
Discover your exposure. Identify risks. Track improvements.
SeguriScan helps you discover your external infrastructure, identify security weaknesses and monitor changes through regular checks.
- 01
Discover your external assets
Start with your company’s domains or IP addresses. SeguriScan discovers related websites, servers and services, including assets that may be missing from your inventory. You review and confirm ownership before active security testing.
- 02
Identify security risks
SeguriScan checks confirmed assets for vulnerabilities and security misconfigurations. It also searches for corporate credentials in known data leaks and identifies domains that resemble your company’s domains.
- 03
Prioritize action
Review security findings with risk priorities, supporting evidence and remediation recommendations. Your team can assess the findings and decide which issues to address first.
- 04
Track changes and fixes
Regular checks help identify new assets, changes in your infrastructure and emerging security findings. Compare results over time to see which issues remain and which are no longer detected.
What your team gets
One platform. Different perspectives.
SeguriScan helps business leaders, IT managers and security specialists understand external security risks and take action, providing the information each team needs to make decisions.
Business Leaders
Understand your risks. See what needs attention.
Get a clear overview of your company’s external security risks, their severity and how they change over time. Use management reports to understand priorities and follow progress.
For Business Leaders →IT Leaders
Know what’s exposed. Prioritize what to fix.
Discover external assets that may be missing from your inventory, understand their security weaknesses and identify what needs to be addressed first. Track findings across regular checks.
For IT Leaders →Security Teams
Investigate findings. Monitor changes.
Review technical evidence, assess vulnerabilities and security misconfigurations, and investigate exposed credentials. Use detailed findings and reports to support remediation and ongoing security monitoring.
For Security Teams →
SeguriScan in practice
One issue, from found to fixed.
An overlooked application can remain exposed to the internet without anyone realizing it. See how SeguriScan helps discover the system, identify a security weakness and check the results after remediation.
Discovered
An overlooked application is found.
SeguriScan discovers a web application missing from the company’s asset inventory. After the company confirms ownership and authorizes testing, the application is included in security checks.
Investigated
A critical vulnerability needs attention.
Security testing identifies a critical vulnerability. SeguriScan provides the affected asset, supporting evidence and remediation recommendations, helping the IT team understand the risk and address the issue.
Checked again
The vulnerability is no longer detected.
After the IT team applies the fix, a subsequent security check no longer detects the vulnerability. The team can review the results and continue monitoring the application for new issues.
The real SeguriScan issue screen, simplified. Invented company, sample data.
Expert security services
Expert testing for systems that need closer examination.
IntruForce specialists assess applications, infrastructure and security scenarios that require dedicated testing. We identify vulnerabilities, investigate potential attack paths and provide practical recommendations to help your team address the findings.
Penetration Testing
Identify and exploit vulnerabilities within an agreed scope. Assess how security weaknesses could be combined to gain unauthorized access, escalate privileges or compromise critical systems.
Web Application Security Testing
Examine authentication, access controls, data handling and business logic, including workflows that require authenticated access and manual testing.
API Security Testing
Test authentication, authorization and data protection across API endpoints, user roles and business workflows.
Phishing Simulations
Assess how employees recognize and respond to realistic phishing attempts, and identify opportunities to improve security awareness.
Testing can be tailored to applicable customer, contractual or regulatory requirements. Scope, permitted activities and deliverables are agreed upon before each engagement.
Frequently asked questions
Questions about SeguriScan
- What does SeguriScan check?
- SeguriScan discovers internet-facing assets associated with your company and checks confirmed systems for vulnerabilities and security misconfigurations. It also searches for corporate credentials in known data leaks and identifies domains similar to your company’s domains.
- Do I need to install anything?
- No. SeguriScan performs external security checks without requiring software installation on your systems or access to your internal network.
- Is security testing safe for our systems?
- SeguriScan uses controlled scanning settings designed to minimize the impact on your systems. Active security testing is performed only with your authorization. As with any security testing, some operational risk remains, and the scope of testing is agreed upon in advance.
- How do you know which assets belong to my company?
- SeguriScan discovers assets potentially associated with your organization. You review and confirm their ownership before they are included in active security testing.
- How often does SeguriScan check our systems?
- The frequency of security checks is agreed upon based on your company’s needs. SeguriScan performs regular checks to identify new security findings and monitor changes in your external infrastructure.
- Does SeguriScan include expert analysis?
- SeguriScan provides automated security findings, risk priorities and remediation recommendations. Expert assessments and additional security testing are available through IntruForce, depending on the selected service.
- What happens during the free pilot?
- We agree on the scope of the pilot and the systems to be assessed. You get access to the SeguriScan platform, including security findings, discovered assets, data leak results and reports. You can explore the results, review identified risks and evaluate how SeguriScan fits your security needs.
Get started
Know your risks before attackers find them.
Discover your external assets, identify security weaknesses and check for exposed corporate credentials with a free SeguriScan pilot. Get access to the platform, findings and reports to understand what needs attention.
- Nothing to install
- No access to your internal network
- No active testing without your approval