The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
Scheduled Scans in Vexta: Cron Jobs and the Scan Queue Explained
Vexta can run scans on a cron schedule in the background, tracking each one through a job queue with real-time progress, so a hunter does not have to remember to kick off the same scan every week.
Vexta's 7 Team Roles: Who Gets to Scan, Fix, Bill or Just Watch
Vexta's role-based access control splits a team into 7 roles, from Owner down to read-only Viewer, so a scan platform used by more than one person does not need to give everyone the same keys.
The Vexta Dashboard: Running and Reviewing Scans Without a Terminal
Vexta's web dashboard covers the whole scan lifecycle across 17 pages, from launching a scan to reading its attack graph, with real-time updates and no command line required.
Vexta Scan Profiles and the Finding Query Language
Vexta ships Stealth, Standard and Aggressive scan profiles plus a SQL-like query language for filtering findings, so a hunter can match scan behavior to a program's rules and cut straight to what matters.
Bring Your Own Key: How Vexta's AI Vulnerability Triage Works
Vexta's AI triage runs on your own Anthropic, OpenAI, Gemini or Azure key, is cost-capped per scan, and is entirely optional; turn it off and Vexta still scans, verifies and ranks findings on its own.
SARIF and JUnit XML: Running Vexta Findings Inside CI/CD
Vexta exports scan results as SARIF 2.1.0 for GitHub and GitLab code scanning, and as JUnit XML for Jenkins, CircleCI and TeamCity, so a finding shows up where a developer is already looking.
Vexta's Report Engine: HTML, PDF, Word and Google Docs, One Click Each
Vexta turns a finished scan into an HTML report with charts, a print-ready PDF, a hand-rolled Word document, or a native Google Doc, all carrying the same executive summary and per-finding evidence.
Reproducible Vulnerability Evidence: Inside Vexta's Full HTTP Exchange Archive
Every proof Vexta captures comes with the exact request and response that produced it, hashed into a tamper-evident chain, so a finding can be independently replayed rather than taken on trust.
How Vexta Verifies a Vulnerability Fix Before You Close the Ticket
Vexta's reverify workflow re-tests a previously discovered vulnerability against the live target and reports back fixed or still_vulnerable, so a hunter never has to take a developer's word for it.