IntruforceSecurity became “one more thing”
Nobody took anything off your plate.
For IT leaders who own security
Find the security issues worth acting on first.
You don't have time to become a cybersecurity expert. We'll help you uncover what matters most.
External review only · Nothing to install · No active testing without your approval
- No access to internal systems
- Websites, internet-facing systems and leaked data
- Built by infrastructure security practitioners
Each issue ranked by urgency, with what it means and how to fix it.
SeguriScan · my.intruforce.comDemo company, sample dataSample data
An issue: priority P1, critical severity, a deadline, a technical description and a fix recommendation
| Prio. | Finding | Asset | EPSS | CVSS | Sev | Confidence | CVE | Checked |
|---|---|---|---|---|---|---|---|---|
| P1 | www.example.com | — | 9.8 | C | T2 | CVE-2026-109618 | 8 Nov 2026 | |
| P1 | lk.example.com | — | 9.8 | C | T1✓ | — | 8 Nov 2026 | |
| P1 | 192.0.2.25 | — | — | C | T1 | — | 8 Nov 2026 | |
| P2 | example.com | — | — | C | T2 | — | 8 Nov 2026 | |
| P2 | www.example.com | — | — | H | T1 | — | 8 Nov 2026 | |
| P1 | vpn.example.com | 83.4% | 9.8 | C | T2 | CVE-2024-21762 | 8 Nov 2026 | |
| P2 | 192.0.2.25 | — | — | H | T3 | — | 8 Nov 2026 | |
| P2 | cdn.example.com | — | 8.1 | H | T2 | — | 8 Nov 2026 | |
| P2 | www.example.com | — | 7.5 | H | T1 | — | 8 Nov 2026 | |
| P2 | shop.example.com | — | 7.5 | H | T1✓ | — | 8 Nov 2026 | |
| P2 | www.example.com | — | 7.5 | H | T1 | — | 8 Nov 2026 | |
| P2 | 192.0.2.25 | — | — | H | T2 | — | 8 Nov 2026 | |
| P2 | 192.0.2.21 | — | — | H | T2 | — | 8 Nov 2026 | |
| P3 | 192.0.2.21:9090 | — | — | M | T2 | — | 8 Nov 2026 | |
| P3 | example.com | — | — | M | T1 | — | 8 Nov 2026 |
Dangerous exposure catalogSW-EXT-EXPOSURE-11
Dangerous exposure: MySQL database (3306)
192.0.2.25
PriorityP1Immediately
CriticalT1 · confidence
192.0.2.25
Age3 d.due by 13 Nov 2026
Exploitationnone
Detected6 Nov 2026checked 8 Nov 2026
Description
The MySQL server answers on port 3306 from the internet. Anyone can try passwords against it, and any flaw in the server is reachable directly.
Recommendations
Close port 3306 on the perimeter. If remote access is needed, allow it only from known addresses or through the VPN.
A server card: risk score, open ports, linked domains and the first thing to fix
| Asset | Risk | Issues | Ports | Technologies | OS | |
|---|---|---|---|---|---|---|
| 9.6 | 11 | 443 | FortiOS | FortiOS 7.2.5 | ||
| 9.4 | 1 | — | — | — | ||
| 9.3 | 22 | 223306920010250 | MySQLElasticsearchOpenSSH+1 | Debian 12 | ||
| 9.1 | 13 | — | — | — | ||
| 8.9 | 2412 | 2280443 | Apache HTTP ServernginxOpenSSH+6 | Ubuntu Linux 22.04 | ||
| lk.example.com | ||||||
| shop.example.com | ||||||
| www.example.com | ||||||
| 8.8 | 1 | — | — | — | ||
| 8.4 | 21 | 2244390901567227017 | Apache TomcatJenkinsGitLab+6 | Ubuntu Linux 22.04 | ||
| 7.9 | 11 | — | — | — | ||
| 7.8 | 1 | 25443587993 | PostfixDovecotnginx+1 | Ubuntu Linux 20.04 | ||
| 7.6 | 1 | — | — | — | ||
| 7.5 | 1 | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| No risk | — | — | — | — | ||
| 21 | 80443 | — | — | |||
192.0.2.20 IPv4 Available Confirmed
www.example.com
Risk8.9High
Open portsUbuntu Linux 22.04Critical (2)High (4)Medium (1)Low (2)
Critical2open findings
SurfacePorts: 3elevated importance: 2
CertificatesTLS ok
What to close first Ports
Web login forms Elevated importance 80443
Public login forms — enable brute-force protection and MFA.
Domains 3
A known flaw in a VPN server, flagged as used by attackers, with the deadline to fix it
| CVE | Product | Asset | Ports | CVSS | Sev | Tier | Published |
|---|---|---|---|---|---|---|---|
| KEV | fortios7.2.5 | vpn.example.com | 443 | 9.8 | C | T2 | 9 Feb 2024 |
| KEV | jenkins2.426.1 | ci.example.com | 443 | 9.8 | C | T2 | 24 Jan 2024 |
| KEV | tomcat9.0.65 | api.example.com | 443 | 9.8 | C | T2 | 10 Mar 2025 |
| fortios7.2.5 | vpn.example.com | 443 | 9.8 | C | T2 | 12 Mar 2024 | |
| php8.3.24 | www.example.com | 80443 | 9.8 | C | T2 | 21 Oct 2026 | |
| php8.3.24 | www.example.com | 80443 | 8.1 | H | T2 | 21 Oct 2026 | |
| http_server2.4.54 | www.example.com | 80443 | 9.8 | C | T2 | 1 Jul 2024 | |
| http_server2.4.54 | www.example.com | 80443 | 9.8 | C | T2 | 7 Mar 2023 | |
| openssh8.9p1 | www.example.com | 22 | 8.1 | H | T2 | 1 Jul 2024 | |
| openssh9.2p1 | 192.0.2.25 | 22 | 8.1 | H | T2 | 1 Jul 2024 |
CVE-2024-21762CWE-787
vpn.example.com
CVSS9.8Critical
CriticalT2 · confidenceKEV · ransomwareexploitation: confirmedEPSS 83.4%
vpn.example.com
CVSS9.8v3.1
ExploitationKEVEPSS 83.4%
ConfidenceT2observed
Published9 Feb 2024
Product and asset
- Product
- fortios · fortinet
- Version
- 7.2.5
- Asset
- vpn.example.com
- State
- Candidate
- Ports
- 443
External sources
NVD · CVE-2024-21762
CISA KEV ransomware
Used in ransomware campaigns. Active exploitation — must be resolved as soon as possible.
- Resolve by
- 16 Feb 2024
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
SeguriScan dashboard: assets, open services, findings by severity, data leaks and the threat level for each category
Dashboard
What needs attention now and how the calculated threat level is distributed across categories.
Services and ports280HTTPS 70HTTP 8−1SSH 50Mail 20Other 6+1
Threat level by category
compared with 2 Nov 2026Lower is better
Current cycle since 8 Novas of 9 Nov 2026
6.4
6.4−0.47.6
7.6−0.14.2
4.20.05.8
5.8+0.34.8
4.8−0.93.9
3.9−0.1Needs attention 4 of 40
The reports list: one report per check, downloadable as Word or Excel
Ready perimeter reports — one per check. Each can be downloaded as DOCX or XLSX.
| Report | Check period | Status | |
|---|---|---|---|
| Perimeter report of 8 Nov 2026 | from 8 Nov 2026 | In progress | |
| Perimeter report of 2 Nov 2026For the period · built 2 Nov 2026 · DOCX, XLSX | 1 Nov 2026 — 2 Nov 2026 | Completed | |
| Perimeter report of 26 Oct 2026For the period · built 26 Oct 2026 · DOCX, XLSX | 25 Oct 2026 — 26 Oct 2026 | Completed |
Data leaks: leaked accounts of staff and customers, whether a password leaked too, and where it turned up
Data Leaks 17
access by grant| Account | Password | Source | Sev | Fields | Found |
|---|---|---|---|---|---|
| a.m*****@example.comStealer log · 8 Nov 2026 | yes | Stealer log | C | emailpasswordURL | 8 Nov 2026 |
| j.r****@example.comStealer log · 8 Nov 2026 | yes | Stealer log | C | emailpasswordURL | 8 Nov 2026 |
| s.p*****@example.comCombolist 2026-08 · 31 Oct 2026 | yes | Combolist 2026-08 | H | emailpassword | 31 Oct 2026 |
| d.l****@example.comStealer log · 24 Oct 2026 | yes | Stealer log | H | emailpasswordURL | 24 Oct 2026 |
| it-support@example.com✓travelbook.example breach · 10 Oct 2026 | yes | travelbook.example breach | H | emailpassword hash | 10 Oct 2026 |
| m.g*****@example.comStealer log · 26 Sep 2026 | yes | Stealer log | H | emailpasswordURL | 26 Sep 2026 |
Passwords and hashes are shown masked. Access to full values is enabled for the organization on request.
The reality of the role
You weren’t hired to be a cybersecurity expert.
But somehow, security became your responsibility.
It can always wait until tomorrow
Until tomorrow becomes six months later.
The picture is incomplete
Findings are scattered across different tools.
And if something goes wrong…
Leadership won’t ask who had time. They’ll ask why nobody noticed sooner.
Turn security into action
More than findings. A way to move things forward.
Most tools stop at "here's your list of problems." The harder part is getting attention, budget, and decisions. That's the part we help you with.
- Show leadership where risks actually exist.
- Support budget discussions with evidence.
- Help everyone align on next steps.
- Give you confidence that you’re focusing on what matters most.
Because sometimes the hardest part isn't finding the problem. It's getting the organization to act on it.
Why IntruForce
Built by practitioners. Designed for the realities of modern IT teams.
Most organizations don’t struggle because they lack security tools. They struggle because translating findings into decisions requires time, coordination, and expertise.
IntruForce helps teams uncover external risks, prioritize what matters, and drive action across the organization — because security programs succeed when insight turns into action.
What makes IntruForce different
- An outside view of your exposure, the way an attacker sees it
- Findings prioritized for action, not investigation fatigue
- Reports designed for both leadership and technical teams
- Guidance shaped by real-world security experience
- Fast to adopt, without complex deployments
- Works alongside the security tools you already use
How it works
Three steps. No installation.
STEP 01
Start with what you already know.
- Share your company domain
- Add other assets only if you have them
- No internal access required
- Confirm in writing which systems are yours: we check nothing else
STEP 02
We uncover what attackers already know about you.
- Forgotten assets
- Exposed services
- Employee credential leaks
- Risks that deserve immediate attention
STEP 03
Know exactly what to do next.
- What deserves immediate attention
- What can wait
- What to fix first
- How to explain it internally
The cost of waiting
The risks don't wait until you have time.
Without visibility, an exposure stays open until someone notices it — and the conversation that follows involves leadership, customers or regulators.
What waiting often means:
Small issues become urgent incidents.
Attackers discover exposures before your team does.
Remediation becomes more expensive and disruptive.
Leadership asks for answers under pressure.
Commonly uncovered
What teams are often surprised to discover
These findings don't usually happen because someone was careless. Infrastructure changes faster than anyone can track.
- Forgotten admin portals still exposed to the internet.
- Employee passwords found in leaked data.
- Systems everyone assumed had been decommissioned were still accessible.
- “How long has this been there?” turned out to be the hardest question to answer.
These are the kinds of findings SeguriScan looks for during the pilot. Which of them apply is different for every company.
What you’ll walk away with
Not just findings. A shared understanding of what happens next.
You won’t receive another spreadsheet of problems. You’ll receive the clarity your team needs to act — and the context leadership needs to support those decisions.
For leadership
Leadership understands
- what matters most
- why action is needed
- where investment should go
- whether things are improving
For your team
Teams know
- what to fix first
- how to approach it
- what can wait
- how to track progress
And when you need it
You’re not left on your own
- cybersecurity practitioners available to help interpret findings
- support in determining next steps
- guidance when decisions become difficult
Questions, answered
FAQ
Will this affect production?
Nothing runs against your systems until you approve it. Any active testing is agreed with you first, including scope and timing.
Is it safe to share our list of systems?
Yes. You send a list of what is already on the internet, not passwords or internal access. We check only the systems you confirm as yours, after you sign a written authorization.
Do I need cybersecurity expertise?
No. The service is designed for IT professionals responsible for security without a dedicated security team.
What exactly will I receive?
We agree the scope of the pilot with you. You then get access to SeguriScan, including security findings, discovered assets, data leak results and reports. What’s included in the pilot →
Can I share the results with management?
Yes. What you receive is agreed with you, so you can pass it on to leadership.
What if I don't know how to address the findings?
Our specialists can review the findings with you as a separately agreed assessment.
Will this create more work for me?
The aim is the opposite: fewer items to look at, with the ones that matter most first.
We already run a vulnerability scanner. Do we still need this?
SeguriScan doesn't replace your scanner; it works alongside it. It adds the outside view: what is actually reachable, what changed, which newly published vulnerabilities (CVEs) affect those systems, leaked passwords, and fake websites imitating your brand. Then it shows what to fix first.
What happens when I send a request?
We'll contact you by email to discuss the pilot and agree on the next steps. No obligation to proceed. No active testing without your approval.
Further reading
Articles from the IntruForce team
Get started
Request a free pilot for your internet-facing systems.
Share your main domain and a work email. You can also list the systems you want to include in the pilot.
- Nothing to install
- No access to your internal network
- No active testing without your approval