Audit your website for known CVE vulnerabilities, missing HTTP security headers, and NCSC UK Cyber Essentials compliance. Get actionable remediation blueprints in seconds.
Audit HTTP headers, SSL/TLS, stack fingerprinting, and known CVE databases in real time.
Our scanner maps passive intelligence directly to the world’s leading vulnerability authorities.
MITRE Corporation
The international standard that assigns unique tracking IDs (like CVE-2024-XXXX) and baseline technical descriptions to publicly disclosed cyber vulnerabilities.
Federally Funded R&D Centre
Operates the official CVE registry, the Common Weakness Enumeration (CWE) catalogue, and the MITRE ATT&CK framework for adversary tactics.
U.S. Dept of Commerce (NIST)
The National Vulnerability Database synchronises with MITRE CVE to provide CVSS v3.1 severity scores (0.0 to 10.0), exploitability metrics, and official patch links.
National Cyber Security Centre
The UK government's technical cyber authority providing actionable guidance for web security, TLS hardening, security.txt adoption, and Cyber Essentials certification.
What our scanner audits during every passive inspection cycle:
Audits CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy to prevent XSS and Clickjacking.
Fingerprints web servers (Apache, Nginx), CMS versions (WordPress, Drupal), and JS libraries against NIST NVD & MITRE catalogues.
Checks TLS encryption, modern cipher support, RFC 9116 security.txt disclosure policies, and UK security baselines.
Detects exposed server banners, X-Powered-By runtime disclosure, exposed `.git/HEAD` repositories, and `.env` files.
Audits session cookie flags (HttpOnly, Secure, SameSite) and overly permissive CORS wildcard policies.
Cankal Software provides end-to-end security remediation, server patching, and penetration testing.
Get an in-depth security architecture review, automated continuous scanning, and hands-on vulnerability patching tailored to your stack.