PRIMATE TRACE
EN / TH
Sign Up
Home
Products
WebAppAPICloud ContainerNetwork Device HostDatabase
Solutions
Risk TriageCVSS Scoring
Company
AboutContact
EN TH
Login
Sign Up
Back to attack surfaces
Data

Host security scanning

The server underneath everything, checked the way an attacker who's already in would look at it.

Why scan this?

A "host" is any server your workloads run on: a VM, a bare-metal box, an on-prem machine. Even with a hardened application on top, an outdated OS package, an unnecessary open service, or an over-permissive user account on the host itself gives an attacker a foothold and a path to move sideways into everything else it touches. This check looks at the host the way an attacker does once they've landed on it.

What you get from this scan

  • An inventory of installed packages checked against known CVEs
  • CVSS-scored findings for outdated OS components and misconfigurations
  • Visibility into unnecessary running services and open local ports
  • Account and permission hygiene findings, such as weak passwords or excess sudo access
  • A report you can use to justify a patch cycle or hardening pass

How this scan stays safe for your systems

  • Checks are read-only against the host's exposed services and metadata; nothing is installed or changed
  • Only the host you register is targeted; the scan never moves laterally on its own
  • Any credentials used for deeper checks are encrypted and never displayed back in the UI
  • You choose exactly when a scan runs
  • Only scan hosts you own or have explicit written permission to test

What we check

Outdated OS packages / known CVEsUnnecessary open servicesWeak or default account passwordsExcess sudo / admin privilegesMissing security patchesInsecure file permissions

Host security scanning

Free to try. See real, CVSS-scored results in minutes.

Start scanning