The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
Software Composition Analysis in Vexta: 7 Ecosystems Covered
Vexta parses dependency manifests across npm, pip, gem, Go, Composer, Cargo, and Gradle/Maven, matching every component against a local CVE mirror with KEV and EPSS context built in.
Secret Detection in Source Code: How Vexta Finds Leaked Keys
Vexta scans source code and extracted JavaScript for hardcoded API keys, tokens, passwords, and dangerous function patterns, then feeds anything it finds back into credential testing.
Vexta's Offline CVE Scanner: 10,000+ Templates, No Network Needed
Vexta bundles over 10,000 detection templates and a local NVD, EPSS, and CISA KEV mirror directly in the binary, so scanning and CVE matching work with no live connection to any external feed.
Vexta Attack Path Chaining: From One Finding to Full Impact
Vexta builds a live attack graph from every host, credential, and finding it discovers, then chains them to show the shortest path from an external host to a crown-jewel asset.
Vexta's Bug Bounty Report Submission to HackerOne and Bugcrowd
Vexta connects directly to HackerOne and Bugcrowd for scope import and report submission, and caches program data locally so browsing programs never waits on an upstream API.
Vexta's Proof-of-Concept Generator for Bug Bounty Reports
Vexta builds a complete reproduction package for every finding, so a hunter can move from confirmed vulnerability to a submittable report without reconstructing the exploit by hand.
Vexta's Intercepting Proxy and Repeater, Built Into the Scanner
An intercepting proxy for pentesting lets you see, pause and replay a request before it reaches the server. Vexta ships one built in, plus an always-on history of every request the scanner itself makes.
Blind SSRF Detection: How Vexta's Built-In OOB Callback Server Proves It
Blind SSRF detection means proving a server made an outbound request even when the HTTP response shows nothing. Vexta's built-in out-of-band callback server catches that proof directly.
Behavioral Anomaly Detection: How Vexta Flags a Response That Doesn't Fit
Anomaly detection in web application testing means comparing a live response to how that endpoint normally behaves. Vexta builds a running baseline per endpoint and flags outliers for a closer look.