CloudSEK BeVigil is an External Attack surface monitoring tool that fingerprints an organization's digital infrastructure along with the service/software components thereby providing a comprehensive view of the entire initial access points in the infrastructure.

Each of these access points are then scanned for multiple (8) attack vectors, namely: Web Apps, Mobile Apps, API, Cloud, CVE, DNS, SSL and Network. Any vulnerabilities or misconfigurations on web and mobile applications are monitored for including OWASP top 10 vulnerabilities or any secrets/ sensitive information like API keys embedded in the source codes using respective in-house scanners.

• - An inventory of API exposed to the internet is maintained and scanned for any misconfigurations using the API Scanner.
• - All cloud assets are scanned for 700+ cloud related issues like publicly listed buckets across Alibaba, Firebase, Azure and more using Cloud Scanner.
• - Network-related misconfiguration like sensitive ports kept open or vulnerabilities in services running on each port are identified using Network scanner.
• - All initial access points are scanned for any existing CVEs, new zero-days, or any actively exploited CVEs using the CVE scanner which is updated every day with new CVEs if identified.
• - Domain-related issues like SPF/DMARC misconfigurations are identified by the DNS scanner.
• - SSL-related issues like certificate expiry or any misconfigurations are monitored using the SSL scanner.