NXCARIS — Exposure Management

Passive only

No API keys required

0 / 0 sources 0%

— Subdomains

— Live Assets

— Technologies

— Certs Expiring

— Credential Exposures

— Sensitive Endpoints

0

TOTAL FINDINGS

0

CRITICAL

0

HIGH

0

MEDIUM

0

LOW

0

ASSETS DISCOVERED

0

3RD-PARTY VENDORS

—

ERM RISK GRADE

0

COLLECTORS OK

Date	Mode	Findings	Crit	High	Risk	Duration	Status
Loading…

Subdomain	IP	Risk Tier	Service Type
No subdomains discovered yet.

URL	Status	Path Type	Severity	Notes
No sensitive paths discovered yet.

BY SEVERITY

0

FINDINGS

Critical

0

High

0

Medium

0

Low

0

SCAN LOG

LATEST ALERTS

No alerts yet

Total Alerts

—

Unread

—

Recent Alerts

Loading alerts…

Scheduled Scans

Automated scans run in the background. Alerts are generated when new findings are detected.

Organization

Frequency

Hour (UTC)

Scan Mode

Loading schedules…

—

POSTURE

ASSETS DISCOVERED

0

—

ACTIVE EXPOSURE

0

findings with active exposure

TECHNOLOGIES

0

unique technologies detected

CERTIFICATES

0

TLS/SSL certificates tracked

No assets discovered yet — run a scan.

—

ACTORS MATCHED

—

ATT&CK TECHNIQUES

—

CREDENTIAL HITS

—

CVE FINDINGS

—

IOC HITS

Run a scan to profile threat actors against observed techniques.

CVE / KEV INTELLIGENCE

No CVE data found — vulnerability enrichment runs post-scan.

Run a scan to populate vulnerability management.

LEAKED CREDENTIALS

Employee credential exposure · Cyberint Targeted Intelligence

—

TOTAL EXPOSED

—

UNIQUE USERS

—

INTEL SOURCES

—

LAST DETECTED

CREDENTIAL EXPOSURE DETAILS

CHECKPOINT INTELLIGENCE

Loading credential exposure data…

CLOUD SECURITY POSTURE

Auto-populated from scan results — cloud exposure, TLS, misconfigurations, vendor footprint

—

TOTAL CHECKS

—

FAILED

—

PASSED

—

CRITICAL SEV

—

TLS GRADE

—

HEADER SCORE

Run a cloud posture scan or view existing findings.

Total

—

Vendors

Critical

—

Tier

High

—

Tier

Risk

—

High Score

Issues

—

Open

Assess.

—

Pending

Contracts

—

Expiring

Alerts

—

Unread

Auto-Discover Vendors from Domain

Enter your organization's domain — we'll discover all third-party vendors, SaaS tools, and cloud providers via passive OSINT.

● CRITICAL ● HIGH ● MEDIUM ● LOW

SUPPLY CHAIN RISK

Third-party discovery · Vendor lifecycle · Security events · Fourth-party exposure

RISK DISTRIBUTION

VENDOR CATEGORIES

VALIDATION STATUS

VENDOR TIERS

SUPPLY CHAIN DEPENDENCY GRAPH

Critical only Identity Fourth Parties

Vendor Security Events

Show changes from last

NEW VENDORS

RISK CHANGES

NEW SECURITY EVENTS

BY PARENT COMPANY

BY ACCESS LEVEL

CONCENTRATION ALERTS

RISK REGISTER

Likelihood × Impact heat map · All organizational risks

RISK HEAT MAP

THREAT INTELLIGENCE FEED

Live articles · MITRE ATT&CK & Kill Chain enriched

Articles: — · Critical: — · High: — · Sources: —

Loading threat articles…

THIRD-PARTY RISK ASSESSMENT

Enter an organization's primary domain to perform passive reconnaissance and identify probable third-party vendors, SaaS platforms, hosting providers, and external dependencies. No intrusive testing is performed.

TARGET DOMAIN *

Enter the root domain only — no https://, no paths.

ORGANIZATION NAME

ASSESSMENT MODE

SCAN DEPTH

Standard and Deep modes include Business OSINT discovery (job postings, privacy pages, subprocessor lists).

AUTHORIZED BY

I confirm that I am authorized to assess this organization's domain and that this assessment will be used for legitimate third-party risk management purposes only. I understand this tool performs passive reconnaissance only and does not test third-party vendor infrastructure.

Confirm authorization to enable

VENDOR INVENTORY

CONFIDENCE

Based on strength of public evidence only. Does not confirm contractual relationships.

RISK

Risk dimensions require manual validation for accuracy.

WHY THIS VENDOR WAS IDENTIFIED

EVIDENCE ITEMS

VALIDATION & BUSINESS CONTEXT

BUSINESS OWNER

TECHNICAL OWNER

DATA CLASSIFICATION

ACCESS LEVEL

Contract confirmed SOC 2 available ISO 27001 available

NOTES

ORGANIZATION ASSETS DISCOVERED

HOSTNAME	TYPE	IP	SOURCE

RISK	CATEGORY	SCORE	TREATMENT	STATUS	OWNER	CONTROLS	ACTIONS
No risks recorded. Click + ADD RISK to begin.

IMPORT CSV

NAME	TYPE	ENVIRONMENT	CLASSIFICATION	OWNER	HOSTNAME / IPs	CRITICALITY	STATUS	ACTIONS
No assets recorded. Click + ADD ASSET or Import CSV.

Select a compliance framework above to begin your assessment.

Open

—

Investigating

—

Resolved

—

Total

—

Loading cases…

COMPANY PROFILE

Company Name

Domains (one per line)

Brand Keywords

Subsidiaries

Search Keywords

CUSTOMER CONTEXT GRAPH

Industry / Sector

Primary Geography

Identity Stack (select all that apply)

Cloud & SaaS Stack (select all that apply)

Crown Jewels / Critical Assets (select common types and/or add custom)

IMPORT FROM FILE

Upload your detection export and NXCARIS will automatically map rules to MITRE ATT&CK and infer coverage quality.
Supported: ATT&CK Navigator layer .json · Microsoft Sentinel ARM export .json · Analytics rules JSON array · Generic CSV with technique columns

Drop detection file here or click to browse

JSON (Navigator / Sentinel ARM / rules array) or CSV

CURRENT COVERAGE

Imported techniques appear here. You can edit quality or add manual entries.

✓ STRONG: 0 ◑ PARTIAL: 0 ? UNTESTED: 0 NOISY: 0 ✗ GAP: 0

TECHNIQUE	NAME / RULE	QUALITY
No detection coverage configured. Import a file or add manually.

KNOWN DETECTION GAPS (one TID per line)

DETECTION ENGINEERING BACKLOG

SIEM & Ticketing Integrations

Configure outbound integrations. Findings can be pushed to any enabled destination.

Organization

Alerts Center

Recent Alerts

Scheduled Scans

Case Management

Case Detail

SIEM & Ticketing Integrations

Alerts Center

Recent Alerts

Scheduled Scans

Case Management

Case Detail

Create New Case

SIEM & Ticketing Integrations