Introduction

Learn how AYAsec scans TLS, HTTP, ports, DNS, credibility, and discovery signals to produce evidence-backed security grades.

AYAsec is an external attack-surface scanning platform. Point it at a domain and it runs six independent scans - TLS, HTTP, Ports, DNS, Credibility, and Discovery - producing a scored, evidence- backed report for each, plus a single weighted Overall grade for the target.

These docs cover everything from your first scan to reading a full report. If you're evaluating AYAsec, start with Quick Start . If you want to understand what each scan actually checks, jump to Scan Types .

Quick Start

Add a target and run your first scan from the dashboard.

How It Works

The scan pipeline, from queued job to a finished report.

Scan Types

What TLS, HTTP, Ports, DNS, Credibility, and Discovery each check.

Reading Reports

Severity levels, findings, and how the Overall score is composed.

What AYAsec does

Every security scan targets a domain or asset you own or are authorized to test in a workspace. HTTP Active and Extended scans additionally require technical ownership verification. Each of the six scan types is purpose-built for one part of the external surface. Discovery is the exception: it can start from a typed apex, an asset group, connected DNS-provider zones, or an uploaded domain list before you decide which hosts to add or scan:

  • TLS - certificate chain, cipher suites, protocol support, and known SSL/TLS vulnerabilities
  • HTTP - security headers, technology fingerprinting, CVE matching, and (in active/extended profiles) live vulnerability probing
  • Ports - open ports, exposed services, and CVE matching against detected versions
  • DNS - DNSSEC, email authentication (SPF/ DMARC/MTA-STS/TLS-RPT), nameserver hygiene, zone transfer exposure, wildcard records, dangling records, and subdomain takeover risk
  • Credibility - DNSBL blacklist status, domain age, abuse reports, and threat-intelligence matches
  • Discovery - subdomain enumeration, related-domain mapping, liveness and HTTP metadata for the discovered surface

Findings are normalized into five severity levels (critical, high, medium, low, info) and rolled up into a 0-100 score and a letter grade (A+ through F) per scan, plus one weighted Overall grade per target. See Scoring for exactly how that's calculated.

Who it's for

Security teams and engineers who need an outside-in view of their own domains. Common use cases:

  • Pre-launch validation for new services and edge endpoints
  • Ongoing monitoring of certificate expiry, exposed ports, and DNS hygiene across a domain portfolio
  • Discovering forgotten subdomains and shadow IT before an attacker does
  • Tracking whether a fix actually landed, via the score/grade history on each target

Getting access

For external attack-surface scanning, AYAsec is a web application - there's no agent to install and no CLI to configure. Sign in, add a target you own or have permission to scan, verify ownership when running HTTP Active or Extended, and run a scan from the dashboard. Use Assets Discovery first when you need to map a wider domain or asset-group scope.