TRITON reads port and service data from navi.db to build a network exposure map — identifying internet-facing services, deprecated protocols, and assets with unexpected open ports, working entirely from scan data already in your local store.
Capabilities
- Queries navi.db for open port and service data across all assets
- Flags deprecated protocols — Telnet, FTP, SSLv3, TLS 1.0/1.1 — by asset
- Identifies assets with internet-facing exposure based on network zone tags
- Gated exposure report — proposed, previewed, sent only on confirm
What TRITON Maps
TRITON reads the port and service data the Tenable scanner already collected and builds the network exposure map your firewall rules should reflect — every deprecated protocol still answering, every unexpected port open on a production asset, every internet-facing service with no corresponding finding.
Why It Matters
Network exposure is the first thing an adversary sees. TRITON ensures your team sees it first — working from navi.db, with no additional scanner, and a human gate before any tag or report is written.
Gate Model
Every exposure report is proposed and previewed before delivery. TRITON requires explicit per-call confirmation. Works entirely from navi.db — no external feeds.