Product
The intelligence layer over your scanners
ProbeIQ orchestrates best-in-class open-source engines, then does the hard part — correlating, de-duplicating, and reporting — so you get a short list of what's true about your perimeter, not four piles of raw output.
Orchestration
One scan, many engines, in the right order
A scan expands into a DAG of jobs run in discovery → probe → assessorder, each engine in its own isolated container. Discovery enumerates and resolves names and finds open ports; probe fingerprints services and HTTP; assess checks TLS configuration and runs templated CVE, misconfiguration and exposure detection.
- Isolated, task-per-job execution — no noisy-neighbor scans
- Rate-limited and intensity-capped per your authorization
- Raw output preserved, then normalized into one schema
- subfinder
- dnsx
- naabu
- httpx
- nmap
- tlsx
- nuclei
Findings
Correlated and de-duplicated — not raw tool dumps
One finding, full history
A stable fingerprint (asset identity + issue type + location) collapses the same issue across engines into a single finding with many occurrences — so you triage it once, not every run.
Tied to persistent assets
Findings correlate to assets by identity, so you can answer "everything wrong with this host" and "when did this service first appear."
Normalized severity
Every engine's rating maps to a common CVSS-aligned scale (critical → info), so you can sort, threshold alerts, and report consistently.
Triage that sticks
Suppressions persist across scans, and a remediated finding that reappears is flaggedregressed — the memory a cron job can't give you.
Continuous monitoring
Scheduled, bounded, fail-safe
Put each scope on a daily, weekly or monthly schedule. Scanning is bounded by your signed authorization and stops automatically if that authorization expires or is revoked — continuous coverage that can't run past its permission.
Reporting
Reports people actually open
- Executive summary — one page, plain language, posture and trend.
- Technical report — every confirmed finding with CVSS and remediation.
- Diff report — what changed since last run; the weekly habit.
- Asset inventory — hosts, services, technologies, certs and expiry.
- critExposed admin panel on api.example.com+ New
- highTLS 1.0 enabled on mail.example.com+ New
- medDirectory listing returned on cdn.example.com↺ Regressed
- lowMissing HSTS header — now fixed✓ Remediated
Delivered in-app, by email digest, and to Slack or a webhook — plus downloadable JSON, CSV and printable HTML export.
Safety
Authorized by design
Every scan is tied to an ownership-verified scope with a current, signed authorization, and enforced at the API, the dispatcher and the worker. Standard scans identify exposure; optional, bounded validation requires separate signed authorization and enablement.
See it against your own surface
Request early access or book a walkthrough with the team.