The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
Vexta's Audit Log and Active Session Management
Vexta logs every login, logout and password change, and lets an owner or admin see every active session on the instance and revoke any of them on the spot.
Vexta's Per-Host Recon Depth on Every Asset Row
Every row on Vexta's Assets tab carries identity, ports, banners, an OS guess with its evidence, a TLS summary and a screenshot, so a hunter isn't reopening five tabs to piece a host together.
Vexta's Cloud Configuration Auditing for AWS, Azure and GCP
Vexta enumerates AWS, Azure and GCP resources, tests S3 bucket permissions directly, and adds every cloud resource it finds as a node in its attack graph.
Vexta's Education Module: Why Every Finding Explains Itself
Every Vexta finding includes a plain-language answer to what the vulnerability is and why it matters, plus the relevant CWE and OWASP references, attached directly to the finding.
How Vexta's Update System Keeps Your Scanner Current
Vexta checks for updates every 24 hours and lets you pick a stable, beta or dev channel, with auto-download separated from apply so you decide exactly when a new build takes effect.
Vexta's Script Engine: 26 Bundled Checks Without an Nmap Dependency
Vexta runs a built-in script engine across every open port it finds, 26 bundled checks in pure Go, with an NSE-style filter language and no external nmap install required.
Vexta's DNS Resolver Pool for Reliable Recon
Vexta keeps a self-validating pool of public DNS resolvers, ranked by latency and reliability, so subdomain enumeration and takeover checks don't silently fail on a dead or throttled resolver.
Vexta's Per-Host Screenshot Snapshot Bundle
Vexta bundles a host's screenshot, identity, OS guess, open ports, TLS cert, tech fingerprint and NSE script output into one document, one click per row.
Vexta ASPM: Asset Criticality Levels and SLA Bands
Vexta's ASPM module classifies every asset by criticality and chains it to nearby findings, so a bug near a crown-jewel asset gets a different SLA than the same bug on a brochure site.