OrbitalCyber
Vulnerability management for your networks, internet edge and cloud accounts: sensors and cloud scanners find what's exposed, honeypots catch intruders, and every finding is tracked until it's fixed.
From CAD 12.00 per month
Features
- Scans from your own sensors — Install a sensor on your network and scan whatever it can reach. Scans from your own sensors aren't metered.
- Sensors and cloud scanners — Scan inside your networks from sensors you install, and your internet edge from our cloud scanners — one console for both.
- Scan windows and blackouts — Keep scans to the hours you allow, with blackout dates for change freezes. Scans pause at closing time and resume where they left off.
- Vulnerabilities tracked to the fix — Findings are tracked per asset, known-exploited ones are flagged, and a finding closes as fixed when a later scan no longer sees it.
- Fixes ranked by impact — Top fixes group findings by the action that resolves them, so the fewest changes close the most findings.
- TLS/SSL grading — Every TLS endpoint graded, with protocols, ciphers, certificate checks and real Heartbleed and CRIME probes.
- AD attack paths, certificate services and GPO audit — BloodHound, PlumHound, Certipy, NetExec and a Group Policy audit run on your sensor; the domain data never leaves it.
- AWS, Azure, Google Cloud and Microsoft 365 compliance — Prowler checks for AWS, Azure, Google Cloud and Microsoft 365, with compliance per framework and tracked findings per account.
- Honeypots that alert — Decoy services on idle sensors record attackers' logins and commands, with email digests and signed webhooks.
- Credentials kept secret — Scan credentials are encrypted at rest and decrypted only in the memory of the sensor running the scan.
OrbitalCyber is a vulnerability management service for organizations that want to know what's exposed on their networks, on the internet and in their cloud accounts — and to see it get fixed. Scans run from sensors you install on your own networks or from cloud scanners we operate; every finding is tracked on the asset it was found on until a later scan shows it's gone. How it works Install a sensor on a Linux host with Docker inside each network you want to assess (the installer can set Docker up). Sensors only connect out to OrbitalCyber — nothing needs to reach into your network (honeypots, if you turn them on, listen on the ports you choose). Or use our cloud scanners for your internet-facing systems, with nothing to install. They scan public addresses only, after you confirm you own the targets or are authorized to test them, and their egress addresses are published so you can allow them through your firewall. Run scans now or on a schedule, from reusable target and port lists — and, on the Professional plan and higher, only inside the hours you allow. Work the findings: vulnerabilities are grouped by asset and by fix, known-exploited ones are flagged, and anything a rescan no longer sees is closed as fixed. Scans included Network vulnerability scanning with OpenVAS and the Greenbone Community Feed, including credentialed scans over SSH, SMB and SNMP. Web, service and misconfiguration scanning with Nuclei templates, optionally after a discovery pass that finds live hosts and open ports. WordPress scanning: core, plugins and themes matched against Wordfence Intelligence vulnerability data. TLS/SSL configuration grading: protocols, ciphers, certificate chain and security features for every TLS endpoint, an overall grade with recommendations, and real Heartbleed and CRIME probes. Active Directory assessment from your own sensor: BloodHound collection analysed with PlumHound, Certipy for certificate services, NetExec checks and a Group Policy audit. The collected domain data stays on the sensor; you get findings and a report bundle. Cloud posture with Prowler for AWS, Azure, Google Cloud and Microsoft 365: failed checks become tracked vulnerabilities on each account, with a compliance summary per framework (for example CIS, ISO 27001, SOC 2, NIST CSF and PCI DSS) and Prowler's full report to download. Run it from your sensor with read-only credentials, or connect Azure and Microsoft 365 by authorizing OrbitalCyber's read-only app and let our cloud scanners do it. Scanning on your schedule Run scans now or daily, weekly or monthly. On the Professional plan and higher, scan windows keep scanning to the hours you allow — nights and weekends, for example — and blackouts stop it entirely on the dates you set, such as a change freeze or month-end close. A scan outside its window waits. One still running at closing time pauses, then picks up where it left off at the next opening without scanning finished hosts again, so a large scan can run across several nights. Give a sensor a default window, or choose one for each scan or schedule. Honeypots on your sensors While a sensor isn't scanning it can run decoy services — SSH and Telnet, SMTP, file sharing, web, Redis, Elasticsearch, industrial control protocols and more — on the network interfaces and ports you choose, with the host firewall managed for you and their outbound traffic blocked. Every connection, login attempt, command and request is recorded. New attackers trigger an email digest (at most every 5 minutes) and signed webhooks (every minute), and you can make the decoys present your own host names, domain and SSH device type. Built for teams Roles: Viewer, Operator, Administrator, Credential admin and Vulnerability manager, mapped from your organization's groups. Members see nothing until they're given a role. Credentials stay protected: they're encrypted as soon as you save them and decrypted only in the memory of the sensor running the scan that uses them. Raw scan…
All products