MEET THE HOUNDS

Every capability is a hound.

Each one hunts a specific exposure. Together, they cover your entire attack surface.

HEIMDALL

Post-Quantum Cipher Analysis

Finds the RSA/ECC crypto quantum computers will break, and builds your migration roadmap.

View agent →

FENRIR

Attack Path Analysis

Chains exploitability, identity, and reachability into ranked, breakable attack paths.

View agent →

LAELAPS

CISA KEV Tagging

Instantly finds and tags every actively-exploited (CISA KEV) vulnerability in the estate.

View agent →

JANUS

Identity Inventory

Inventories every human and non-human identity, and the credential weaknesses attackers love.

View agent →

PYTHIA

AI Inventory

Discovers shadow AI, classifies it by role, and governs where its data flows.

View agent →

MIMIR

Software Analyzer

Reads software inventory from navi.db — version sprawl, end-of-life packages, and a risk leaderboard ranked by asset spread and critical finding count.

View agent →

CERTANIA

Certificate Agent

Maps every expiring certificate to its assets before something breaks.

View agent →

CERBERUS

IoT Discovery

Hunts unmanaged IoT and OT at the network edge with confidence scoring.

View agent →

ANUBIS

ACR Calibration

Calibrates asset criticality so every priority reflects your business reality.

View agent →

CHARON

EOL/Unsupported Tagging

Tags every asset running end-of-life, unpatchable software.

View agent →

ORTHRUS

MITRE ATT&CK Tagging

Links your CVEs to MITRE ATT&CK techniques for an attacker's-eye view.

View agent →

CAVALL

Custom App Naming

Finds software hiding in routes and paths that inventory missed — reads app-route and filesystem-path data from navi.db to name every custom and shadow application.

View agent →

LINNAEUS

Asset Classification

Reads assets and plugin output from navi.db — classifies every host by type and OS lineage, shows coverage gaps, and proposes Class tags gated for your approval.

View agent →

CHRONOS

Scan Coverage Evaluation

Queries navi.db for last-seen dates and scan-source data — surfaces stale assets, below-threshold subnet coverage, and hosts that have never returned a finding.

View agent →

COVENANT

AI Contract

Runs the pack on a schedule — gated, logged, and armed only by you.

View agent →

GABRIEL

Email & Reports

Closes the loop — owner-routed remediation emails, CISA KEV fire-alarms, certificate countdowns, and morning briefings, double-gated and previewed before anything sends.

View agent →

ALERT RAVEN

Alerting

Watches your estate for the conditions worth waking a human — coverage drops, fresh KEV, expiring certs — and fires a gated email digest the moment one trips.

View agent →

SIRIUS

Agent Group Tagging

Tags assets by Tenable agent group for clean segmentation.

View agent →

GARMR

Tag Removal

Lists every tag and cleanly removes the ones you don't want.

View agent →

SPHINX

Unknown-Unknowns Dashboard

One dashboard that surfaces what you're not seeing — ownerless assets, unscanned hosts, coverage gaps — ranked by exposure.

View agent →

ATLAS

Exposure Routes

Maps every route and path to its owner — and spotlights the ownerless gaps.

View agent →

DAEDALUS

Dashboard Builder

Assembles audience-aware exposure views from navi.db data — practitioners get finding-level drill-down, executives get risk posture without the noise.

View agent →

ARGOS

Asset Deep-Dive

Give it one asset — a UUID or an IP — and it returns the whole story: risk band, every tag decoded, top CVEs, software, and certificates.

View agent →

AMAROK

Remediation Tracking

Follows every approved fix from proposal to verified closure — re-queries navi.db after each remediation window to confirm the patch landed, the tag was written, and the finding actually closed.

View agent →

NEMESIS

Suppression & Exception Audit

Audits every suppression and accepted-risk record in navi.db — surfacing stale justifications, expired waivers, and exceptions that have outlived their rationale.

View agent →

NYX

Dark Asset Discovery

Cross-references scan data and asset records in navi.db to surface hosts that exist but have never appeared in a scan result — shadow deployments and forgotten infrastructure.

View agent →

HERMES

Remediation Routing

Reads owner tags and asset group data from navi.db to route every approved finding to the correct accountable party — and surfaces the findings with no owner at all.

View agent →

HEPHAESTUS

Compliance Mapping

Maps every finding in navi.db to the compliance controls it violates — CIS, NIST, PCI-DSS, SOC 2, ISO 27001 — producing audit-ready evidence from data already in your estate.

View agent →

PROTEUS

Asset Classification Audit

Audits asset classification data in navi.db — finding assets with missing, inconsistent, or contradictory type tags, OS lineage, and criticality scores.

View agent →

HECATE

Tag Integrity Audit

Audits the tag estate in navi.db — finding contradictory tags, stale rule-applied values, and critical tag categories with no coverage across the estate.

View agent →

TRITON

Network Exposure Analysis

Reads port and service data from navi.db to map network exposure — deprecated protocols, unexpected open ports, and internet-facing services with no corresponding finding.

View agent →

CASSANDRA

Remediation Velocity Tracking

Calculates your actual remediation velocity from navi.db finding timestamps — and projects whether current fix rate will clear the backlog before SLA deadlines arrive.

View agent →

MORPHEUS

Software Risk Leaderboard

Reads software inventory and finding data from navi.db to rank every package by asset spread, critical finding count, and KEV presence.

View agent →

AEGIS

Scan Coverage Audit

Audits scan coverage in navi.db — finding assets with stale last-seen dates, subnets with no scan history, and agent-managed hosts that have stopped checking in.

View agent →

The Search Pack

Search & Exploration

Bloodhound, Hellhound, Foxhound, Wolfhound, and Greyhound — five read-only hounds that search assets, findings, plugins, app routes, and filesystem paths in navi.db. Instant lookup, no writes, no gates.

Bloodhound →Hellhound →Foxhound →Wolfhound →Greyhound →

Ready to deploy the pack?

See the hounds in action against your attack surface.

See the Live Demo →

Where the pack hunts next: Roadmap →