Assets and surface
Domains, IPs, subdomains, services, technologies, virtual hosts and exposed panels in scope.
SOKOL SCANNER / PROPRIETARY PLATFORM
SOKOL Scanner platform for assets, evidence and reporting
SOKOL Scanner is the Red Team internal workspace. It connects assets, technical signals, human validation, evidence, guidance and repeat testing. The platform helps specialists run a consistent assessment, but it does not confirm vulnerabilities automatically.
Discuss an assessment →
CAPABILITIES
Complete technical context in one project
Ports and protocols
TCP/UDP services, TLS, DNS, HTTP, VPN and network exposure remain connected to each asset.
Applications and interfaces
Web intelligence, routes, content, roles, sessions, APIs and business logic form one assessment map.
Content and panels
Directory discovery, admin surfaces and hidden entry points retain progress and evidence.
CVE and threat intelligence
NVD, CISA KEV and other sources create validation candidates, never automatic findings.
Human confirmation
The specialist verifies the attack scenario, impact and safe evidence boundary.
Evidence and history
Results connect asset, request, observation, priority, recommendation and repeat-audit status.
Report and repeat audit
Leaders see risk, engineers receive recommendations and testing after changes records the new status.
RESULT LIFECYCLE
The platform never jumps from CVE news to “critical vulnerability”
Source
Origin, date, product and technical reference are retained.
Candidate
Intelligence is matched to asset, technology and possible version.
Check
A module or specialist receives an authorized task.
Observation
The actual response, exposure or partial execution is retained.
Confirmation
A finding exists only with sufficient evidence and impact.
Report and repeat audit
The client receives recommendations and implements changes; the agreed scenario can then be tested again.
SOKOL SCANNER / FAQ
What to know about the platform
A concise guide to SOKOL Scanner, the limits of automation, project scope and the result delivered to the client.
01Project context
02Human validation
03Evidence and status
01Is SOKOL Scanner a separate SaaS?
No. It is currently our proprietary internal platform used by the Red Team to improve assessment depth, consistency and evidence quality.
02Does it automatically confirm vulnerabilities?
No. Automation creates technical signals and observations. Confirmation requires context, validation and specialist judgment.
03What systems can be included?
An agreed scope may include websites, APIs, servers, networks, VPN, cloud, CMS, e-commerce and external attack surface.
04What does the client receive?
Validated findings, evidence, impact, priority and recommendations. The client implements fixes; support and repeat audits are agreed separately.
05How does the platform separate a signal from a confirmed finding?
A signal remains an observation or candidate until a specialist validates context, reproducibility and impact. Only then can it become a confirmed finding.
06How does a repeat audit work after changes?
The client implements the fixes. We then repeat the agreed scenario, retain new evidence and record the current status of the result.