Local probe
Installed in your network with one command to assess the inside and the perimeter.
Argunis/Security/Vulnerabilities
First, what is exploited today.
Argunis finds the vulnerabilities in your internal network, your perimeter, every server’s packages and your applications’ libraries, and ranks them by real risk.
Vulnerabilities · summary
Open260
Critical14
Exploited today (KEV)5
On the perimeter2
Most exposed assets
Your network and your perimeter
A vulnerability probe in your network assesses the inside; the probe operated by Argunis assesses your perimeter from the internet, or your internal networks through a tunnel, with nothing installed. You define scopes, vantage points and time windows.
- Black, grey or white box
- Perimeter with domain proven by TXT
- WireGuard, OpenVPN, IPsec tunnel or your VPN
- Scheduled scans within a window
Scope · Office networkGrey box
10.20.0.0/22local probe412 IPs
store.comArgunis probe · perimeter3 IPs
- 1Discover
- 2Ports and services
- 3Credentials
- 4Vulnerabilities
- 5Report
Ranked by real risk
Every finding carries its CVSS, whether it is in the KEV catalog of what is exploited today, its EPSS probability and whether it is visible from the internet. That gives its risk, so you know what to patch first.
- KEV: actively exploited
- EPSS: exploitation probability
- Internet exposure
- Exceptions with reason and expiry
Priority
What to patch, machine by machine
With the agent inventory and authenticated findings, Argunis builds the list of patches and changes that fix each machine’s vulnerabilities. It also checks languages, network firmware and your applications’ libraries.
- Hardening per machine, grouped by fix
- Node.js, Python, PHP, Java, .NET and OpenSSL
- Network firmware and Coolify
- Lockfile libraries against OSV
Hardening · srv-erp-01
Vulnerabilities by severity
apt upgrade openssh-serverfixes 4high
Update Node.js to 20.18fixes 3medium
Everything Vulnerabilities includes
Argunis probe
Assesses your perimeter from the internet or your internal networks through a tunnel.
Credentials
SSH, Windows, SNMPv3 or basic HTTP in the vault, to read versions and patches.
Scopes
Targets, vantage point, ports, mode and time window of each assessment.
Summary
Open, actively exploited, visible from the internet and most exposed assets.
Findings
Their risk, what to do, an exception or a security case.
Hardening
Patches and changes machine by machine, from the inventory.
Languages and firmware
Versions with security advisories and which version to upgrade to.
Application dependencies
Your lockfile libraries checked against OSV.
The probes only detect: they never exploit a vulnerability or change anything on your machines.
SIEMFrequently asked questions
Can the assessment affect my machines?
The probes detect and do not exploit. You define each scope’s time window, speed and ports.
How is my perimeter assessed?
With the probe operated by Argunis, from the internet, after proving with a TXT record that the IPs and domains belong to your company.
What if I cannot install a probe in a network?
The Argunis probe reaches your internal networks through a WireGuard, OpenVPN, IPsec IKEv2 tunnel or your remote-access VPN.
See the failure before your customers do.
We show you Argunis on your own operations and answer your questions in one call.