Available Scan Types
1. Network Scan (Network)
- nmap: Open port and service detection
- Software version identification
- Operating system detection
- Firewall and filtering analysis
2. Web Scan
- nikto: Web server vulnerabilities
- HTTP security headers (CSP, HSTS, X-Frame-Options)
- SSL/TLS certificates and configuration
- Basic OWASP Top 10
3. Automated Pentesting
- SQL Injection: SQL injection tests
- XSS: Cross-Site Scripting
- Directory Fuzzing: Hidden files and directories
- Subdomain Enumeration: Exposed subdomains
- Exploit Search: Known CVEs
4. System Audit
- SSH configuration
- Users and permissions
- Suspicious processes
- Authentication logs
- Rootkit detection
5. Complete Scan (Full)
All tools in parallel:
- nmap + nikto + sslscan + gobuster + nuclei + searchsploit
- Consolidated report with severity (CRITICAL/HIGH/MEDIUM/LOW)
- Mitigation recommendations
Threat Analysis (STRIDE)
The agent can model threats using the STRIDE framework:
- Spoofing - Identity spoofing
- Tampering - Data modification
- Repudiation - Repudiation of actions
- Information Disclosure - Information leak
- Denial of Service - Denial of service
- Elevation of Privilege - Privilege escalation
Forensic Analysis
When there is an incident, the agent can:
- Analyse recently modified files
- Search for rootkits using chkrootkit/rkhunter
- Review authentication logs (SSH, sudo)
- Identify active suspicious connections
- Generate timeline of events
Code Scanning (SAST)
In addition to infrastructure, the agent scans source code:
- Bandit: Security linter
- Semgrep: Multi-language analysis
- Dependency Check: CVEs in dependencies
- Trivy: Docker container security
Example Report
SECURITY SCAN REPORT - ejemplo.com
═══════════════════════════════════════
CRITICAL (1)
├─ SSL: TLS 1.0 enabled (deprecated)
└─ Recommendation: Disable TLS 1.0/1.1
HIGH (3)
├─ HTTP: Missing HSTS header
├─ HTTP: Missing CSP header
└─ SSH: Root login permitted
MEDIUM (5)
├─ HTTP: X-Frame-Options not set
├─ HTTP: Server version exposed
└─ ...
PASSED: No SQL injection detected
PASSED: No XSS vulnerabilities found
PASSED: SSL certificate valid
Overall Score: 72/100 (Grade C)
Conclusion
Security is not a product, it is a process. AI security agents automate continuous vulnerability detection, allowing teams to focus on mitigation and response rather than manual scanning.
Request a free security audit of your infrastructure.
- Security
- Pentesting
- OWASP
- Cybersecurity