Know Your Vulnerabilities
Before Attackers Do

Every business has doors left open online. Cydome finds yours before attackers do — and shows you, in plain English, exactly what to fix first.

External vulnerability scanning & attack-surface mapping for SMEs — built in Bangkok by SafeComs, 25+ years of penetration testing across Asia-Pacific.

Resilience check — example.com
3
Critical
7
High
12
Medium
28
Low
What this means for your business
CriticalA remote door into your network is wide open
HighEmails to your customers can be forged
MediumYour website can be hijacked or impersonated
LowYour internal network is mapped for attackers

Trusted by organizations across Asia-Pacific

Your External Security
Posture, Quantified

In minutes, cydome.app does the work that used to take a security team days — uncovering every internet-facing asset you own, hunting down the weaknesses attackers look for, and handing you a clear, ranked list of exactly what to fix first.

No agents to install. No internal access required. Just enter your domain and let the platform work.

Continuous Monitoring

Auto-test daily, weekly, monthly, or quarterly. Get instant alerts when new vulnerabilities or ports are discovered.

Results in Minutes

Recon scans deliver findings fast; full assessments run a complete 6-stage pipeline

📋

Actionable Reports

PDF and DOCX reports with severity ratings, remediation steps, and executive summaries

Scan Pipeline — Full Recon + Scanning
01Domain DiscoveryDNS, subdomains, WHOIS
02HTTP ProbingLive hosts, technologies, headers
03OSINT EnrichmentShodan, Censys, VirusTotal
04Vulnerability ScanningPort scanning, service detection
05Deep AnalysisSSL/TLS, CMS, misconfigurations
06CVE & Exploit CheckNVD lookup, PoC discovery
Powered by Industry-Leading Sources
cydome.app integrates multiple intelligence feeds to build the most complete picture of your external exposure.
🌐

DNS & Subdomain Discovery

Enumerate subdomains, DNS records, and zone configurations to map your complete domain footprint. Finds assets you didn't know were public.

Reconnaissance
🕵

Shodan Intelligence

Query the world's largest internet-connected device database to discover exposed services, open ports, and vulnerable software across your IP ranges.

Reconnaissance
🔒

Censys Asset Inventory

Deep analysis of TLS certificates, host configurations, and exposed services. Detects expired certificates, outdated TLS versions, and risky service exposure.

Reconnaissance
🛡

VirusTotal Threat Intel

Cross-reference your domains and IPs against 70+ antivirus engines and threat databases. Surface malware associations and reputation issues.

Scanning

CVE Enrichment (NVD)

Automatically match detected software versions against the National Vulnerability Database. Enrich findings with CVSS scores, CWE classifications, and references.

Enrichment
💣

Exploit PoC Discovery

Search public repositories for known proof-of-concept exploits targeting your vulnerabilities. Know which findings have active exploit code in the wild.

Enrichment
Test. Prove. Monitor.
Most companies discover vulnerabilities, scramble to prove compliance, and hope nothing changes before the next audit. The SafeComs Compliance Trilogy eliminates this cycle. One vendor, complete coverage, no gaps.
01. TEST

Cydome

Find vulnerabilities automatically using 33 scan modules. Delivered as professional, actionable PDF reports to replace expensive manual pentests.

Explore Cydome →
02. PROVE

iComply

Demonstrate compliance with evidence. We map your current state against ISO 27001, SOC 2, and PDPA, closing compliance evidence gaps instantly.

03. MONITOR

GuardTech

Stay secure between audits. Get continuous 24/7 security monitoring and alerts because point-in-time assessments decay over time.

Learn about the Trilogy Platform
Choose Your Depth
Start with a free reconnaissance scan to map your external attack surface — then go deep with full vulnerability scanning when you're ready.

Recon

Free
~15 minutes · self-serve
  • Domain & subdomain discovery
  • HTTP probing & tech detection
  • OSINT enrichment (Shodan, Censys)
  • SSL/TLS & email security check
  • Deep vulnerability scanning
  • CVE enrichment & exploit PoC
Start Free Recon →

Full Recon + Scanning

15,000THB
48-hour turnaround · human-reviewed
  • Everything in Recon
  • Deep vulnerability scanning (Nuclei)
  • Port scanning & service detection
  • CVE enrichment & exploit PoC discovery
  • Professional PDF/DOCX report
  • Remediation guidance
Book Full Scan →
Vulnerability Assessment Report
Executive Summary
Critical Findings
PDFDOCXJSON

Client-Ready Reports,
Instantly Generated

Every scan produces a professional branded report ready to share with management, compliance auditors, or clients. No formatting needed.

  • Executive summary with risk score
  • Severity breakdown with visual charts
  • Detailed finding descriptions
  • Step-by-step remediation guidance
  • Affected assets and evidence
  • Available in PDF, DOCX, and JSON
Download a sample report →

Plain-English security, for the people who run the business

View all articles →

Request Your
Assessment

Tell us about your organization and the domain(s) you'd like assessed. Choose a free Recon scan, or a Full Recon + Scanning assessment paid securely via Stripe.

Areas of Interest

Free Recon is self-serve — we'll email your report. Please confirm you're authorized to scan the domain.

Or email us directly at cydome@safecoms.com