Most vulnerability scanners report everything that might be vulnerable — based on software version numbers, banner strings, or theoretical conditions. The result is thousands of findings, most of which require a security expert to triage and most of which are either unexploitable or irrelevant to your environment.
VeilScan operates differently. Every finding at Critical or High severity must pass a proof standard before it enters your report. A Critical finding requires a reproducible artifact demonstrating real impact: a captured response showing data exposure, a confirmed exploit trigger, a verified DNS takeover. Findings that cannot be proven are automatically downgraded. What reaches your dashboard is a shorter, verified list that a non-security engineer can understand and act on immediately.
See: Proof-Based Findings — full feature detail
VeilScan scans everything visible from the public internet associated with your domain:
.env files, backup.zip, config.php, database dumps, and similar sensitive files accidentally published.See: Asset Discovery feature · TLS and Email Security feature · Cloud Misconfiguration Detection · What is EASM?
An individual vulnerability tells you about one issue. An attack path tells you what an attacker can actually do with it.
Where VeilScan finds multiple related verified findings, it constructs an attack path narrative: a step-by-step chain showing how an attacker could move from initial external access to a meaningful impact (credential exposure, data breach, lateral movement). Each path includes the individual findings involved, the chain sequence, and the estimated business impact at the end.
This context makes it easier for a CTO or founder to understand which findings deserve immediate action vs. which can wait for the next sprint.
See: Attack Path Analysis feature · What Is Attack Path Analysis?
VeilScan produces a signed, timestamped PDF report containing:
Reports include a verification token. Share the token with auditors, customers, or investors who can verify the report was generated by VeilScan without accessing your full account.
See: PDF Reports feature · Compliance Mapping feature · Business Impact Score feature
Paid plans include scheduled scans that run automatically on a weekly or monthly cadence. Each scheduled scan runs the full pipeline and produces a delta report highlighting:
When a new Critical or High finding is detected, VeilScan sends a Slack alert immediately — before the next scheduled report. This means your team knows about serious new exposures within minutes, not days.
See: Continuous Monitoring feature · Slack Alerts feature
No. VeilScan is specifically designed for teams without a dedicated AppSec function. Every finding includes plain-language description, remediation guidance, and business context. The Business Impact Score tells you how serious each finding is in terms your CTO or board can understand. Proof evidence tells you exactly what is exposed and how, without requiring security expertise to interpret.
The free plan includes one lifetime scan. The Starter plan includes one domain with monthly monitoring. Core and Pro plans include weekly monitoring across multiple domains. Manual on-demand scans are also available on all paid plans within monthly quota limits.
Yes. The Core plan supports up to 5 domains and the Pro plan up to 20 domains. Each domain is independently monitored. You can scan different domains on different schedules within the same account.
A penetration test is a time-boxed, manual assessment conducted by a human security professional. It produces a point-in-time report. VeilScan is continuous, automated, and external-only. The two are complementary: VeilScan covers the 11 months between annual pentests and surfaces regressions a pentest would miss because it runs continuously. See: VeilScan vs manual penetration testing.