Your security changes. Scanner keeps watching.

ISMS owners, security operations, and MSPs who need dated vulnerability-assessment reports — not a one-off pentest the week before the audit.

• Security dashboard

  • Workspace overview of monitored targets and targets with detected vulnerabilities
  • Finding distribution by severity and targets ranked by vulnerability count
  • Open target details directly from the dashboard to investigate the exposure

• Targets and inventory

  • Census IPv4 and IPv6 addresses with optional labels
  • Current snapshot: open ports, services, HTTP endpoints, and vulnerabilities
  • Assessment status shows coverage: not started, scanning, incomplete, covered, due, or failed

• Gated scan pipeline

  • Stages unlock in order: ports, services, HTTP, then matching specialized checks
  • One-click assessment plan runs discovery then queues the right follow-on scans
  • Live task progress with status and phase; cancel a check if needed

• Broad assessment coverage

  • Port and service discovery, HTTP surface identification, and vulnerability scanning
  • Protocol and stack checks where the target exposes them (TLS, remote access, web, file sharing, and more)
  • Each check runs as a task you can watch, cancel, and review when it finishes

• Findings you can act on

  • Correlated issues: confirmed, potential, and configuration
  • Vulnerabilities and Services views across every target, filterable and sortable
  • Global reports snapshot every target and diff new, unchanged, and resolved findings

• Continuous 7-day cycle

  • Missing and due checks queue automatically so coverage does not go stale
  • Scan nodes you register run assessments with concurrent-scan limits you set
  • Saved HTML reports with scope, methodology, and findings — suitable evidence packs for security audits

• Understand the exposure

  See inventory totals and the distribution of stored findings by severity across your workspace. The overview identifies the snapshot date, so you know which assessment data you are reviewing.

• Focus your investigation

  Start with targets ranked by detected vulnerability count, then review severity to decide what needs attention. Open the existing target details directly from the dashboard.

• Find the detail that matters

  Search target addresses and labels, filter by severity, and sort inventory tables. Inspect open ports, detected services, HTTP endpoints, and vulnerability findings in the target detail panel.

• Follow changes in the inventory

  Review trends from recorded daily inventory snapshots. Historical charts appear when multiple observations exist; 30-day comparisons appear when the matching baseline is available.

• Cover and document details (date, previous report, in-scope hosts)
• Scope: every target address in the snapshot, with labels
• Methodology: black-box reconnaissance, enumeration, and vulnerability identification
• Findings classified as confirmed, unconfirmed, or misconfiguration, with severity bands
• Change since the last report: new, unchanged, and remediated issues
• Clear statement that exploitation was not performed

Use the console for ongoing assessment; generate an HTML report when you need a dated snapshot for an audit, ISMS review, or customer due diligence.

ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, NIS2, GDPR (Art. 32), DORA, Cyber Resilience Act (CRA), PCI DSS, SOC 2, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, Cyber Essentials / Plus, ENISA guidance

• ISO/IEC 27001

  ISMS technical evidence for vulnerability management and ongoing risk treatment on in-scope systems.

• ISO/IEC 27002

  Control-oriented proof that technical vulnerabilities are identified, tracked, and rechecked.

• ISO/IEC 27017

  Cloud security control evidence for assessed cloud-facing addresses and services.

• ISO/IEC 27018

  Supporting technical checks where PII-processing systems are in the assessment scope.

• ISO/IEC 27701

  Privacy-information management: technical security evidence beside your PIMS controls.

• NIS2

  EU network and information security: continuous assessment and reporting for essential and important entities.

• GDPR (Art. 32)

  Security of processing — technical measures and testing evidence for systems that handle personal data.

• DORA

  Digital operational resilience for financial entities: ICT risk and vulnerability testing evidence.

• Cyber Resilience Act (CRA)

  Product cybersecurity obligations — vulnerability handling and assessment records for digital products in scope.

• PCI DSS

  Cardholder-data environments: regular vulnerability assessment reporting for in-scope hosts.

• SOC 2

  Trust services criteria — technical monitoring and vulnerability management evidence for auditors.

• NIST Cybersecurity Framework

  Identify / Protect / Detect activities backed by inventory, findings, and recurring assessment.

• NIST SP 800-53

  Control families such as RA and SI — vulnerability scanning and remediation tracking evidence.

• CIS Controls

  Continuous vulnerability management (and related safeguards) with dated findings and coverage status.

• Cyber Essentials / Plus

  UK baseline technical controls — assessment output to support vulnerability and patch evidence.

• ENISA guidance

  Alignment with ENISA technical security practice for EU operators that must show ongoing assessment.

Scanner does not issue certificates and does not replace your auditor, DPO, or compliance officer. It supplies vulnerability-assessment reports suited to the technical evidence those programmes typically require.

1. 01

   Buy access

   Contact us to purchase Scanner for your organisation. We size scan nodes, target scope, and how you will reach the console.

2. 02

   Open the console

   Access the operator console. Register SSH scan nodes (Test before Save) and add the IP addresses you need assessed.

3. 03

   Run and review

   Start an assessment or individual checks. Watch Tasks until inventory and correlated findings land, then generate a report when you need an audit or management snapshot.

• On request

  Internet security solutions

  • Protection against online threats and attacks
  • Secure web gateways and firewalls
  • Advanced threat detection and response

• On request

  Secure software design

  • Development of secure software applications
  • Implementation of best practices in secure coding
  • Continuous security testing alongside Scanner assessments

• On request

  Security architecture design

  • Development of secure cloud and internet infrastructure
  • Integration of advanced security features
  • Scalable and resilient architecture planning

• On request

  Physical security and home automation

  • State-of-the-art surveillance systems
  • Smart home integration and automation
  • Access control and monitoring solutions

• On request

  Compliance and governance

  • Adherence to industry regulations and standards
  • Monitoring and reporting support
  • Assistance with audits and certifications

• 01

  Product first

  You are buying Scanner: targets, scan nodes, gated checks, tasks, correlated findings, and reports — not a vague security retainer.

• 02

  Reports for ISO/IEC 27001 and peers

  HTML reports with scope, methodology, findings, and diffs are suited to ISO/IEC 27001 and the other security frameworks named on this page.

• 03

  Coverage that stays current

  The 7-day cycle queues missing and due checks so ports, services, HTTP, and matching specialized scans do not go stale between manual runs.

• 04

  Findings operators can trust

  Findings are correlated into one view. Confirmed means agreement across detections. Reports show new and resolved issues against the previous snapshot.

• 05

  Progress you can see

  Every scan is a task with status and phase. Assessment labels on targets show whether coverage is incomplete, covered, due, or failed.

• 06

  Extras when you need them

  Architecture, compliance mapping, software hardening, and physical security remain available on request around the Scanner subscription.