VulnWatch
PASSIVE VAPT & ATTACK SURFACE INTELLIGENCE FOR MODERN ORGANIZATIONS
Previous Scan History
Strictly Masked Public Feed| Target Host | Posture Score | Findings Count | Audit Status | Action |
|---|---|---|---|---|
| https://sonora.ra**e.in/ | Grade A (88/100) | 5 issues | Completed | View Report |
| https://sonora.ra**e.in/ | Grade C (52/100) | 10 issues | Completed | View Report |
| https://sonora.ra**e.in/ | Grade C (52/100) | 10 issues | Completed | View Report |
| https://upskill.fr**************h.com/ | Grade C (52/100) | 11 issues | Completed | View Report |
| https://vulnwatch.ch********y.in/auth/login?next=/scan | Grade B (65/100) | 4 issues | Completed | View Report |
| https://ch********y.in/ | Grade B (64/100) | 8 issues | Completed | View Report |
| https://ch********y.in/ | Grade B (64/100) | 7 issues | Completed | View Report |
| https://ch********y.in/ | Grade B (64/100) | 7 issues | Completed | View Report |
| https://ch********y.com/ | Grade B (69/100) | 6 issues | Completed | View Report |
| https://ch********y.in/ | Grade B (64/100) | 7 issues | Completed | View Report |
About Platform Architecture
How every assessment is scoped, executed, and mapped back to security guidance.
Automated VAPT Pipeline
Every scan runs a repeatable sequence — target validation, passive reconnaissance, header/cookie analysis, and structured reporting.
Boundary & SSRF Defense
Target URLs are resolved and validated before a request goes out. Loopback addresses, private IP ranges, and internal hostnames are blocked by default.
OWASP & Defense-in-Depth
Checks map to OWASP secure-headers and session-management guidance — CSP, HSTS, cookie flags, and HTTP verb enumeration.
Continuous Audit Logs
Track posture changes over time with persistent scan history, severity trends, and automated export capabilities in HTML, PDF, and JSON formats.