Your enterprise attack surface.
Continuously mapped.
RogueAgent ASPM™ automates external asset discovery, multi-mode reconnaissance, and vulnerability signal collection across cloud, web, and infrastructure targets — all in one workspace.
Beta access is open. Early access teams receive dedicated onboarding, direct engineering support, and locked-in beta pricing on GA release.
Beta includes
- External asset & subdomain discovery
- OSINT, DNS, port, and service fingerprinting
- Nmap, Nuclei, Subfinder, FFUF integrations
- Multi-workspace scope management
- Unified finding schema with CVSS context
- Scheduled & triggered scan pipelines
- Audit-ready evidence export packages
- RBAC + SSO (SCIM provisioning)
- CloudSignals+RiskOps™ risk register sync
Attack surface telemetry.
Everywhere your targets live.
RogueAgent continuously maps your external attack surface and correlates it against live global threat intelligence — so you see what adversaries see before they act.
Four modules. Full ASPM lifecycle.
RogueAgent covers discovery, reconnaissance, vulnerability scanning, and workspace management — in one unified platform.
Asset Discovery
Continuously enumerate hosts, subdomains, IP ranges, cloud assets, and exposed services across all registered target scopes.
- Subdomain brute-force & enumeration
- Cloud asset inventory (AWS, Azure, GCP)
- Continuous delta tracking
- Scope-based workspace isolation
Recon Automation
Orchestrate multi-mode reconnaissance pipelines — OSINT, DNS brute-force, port scanning, and service fingerprinting — on demand or on schedule.
- OSINT & passive intel collection
- DNS enumeration & zone walking
- Port scanning & service fingerprinting
- Scheduled pipeline triggers
Vulnerability Scanning
Integrate leading open-source and commercial scanners. Normalise results into a unified finding schema with severity, CVSS, and asset context.
- Nmap, Nuclei, Subfinder, FFUF
- Commercial scanner API connectors
- Unified CVSS-scored finding schema
- Deduplication & triage workflows
Workspace Management
Scope, segment, and manage assessment workspaces per client, business unit, or engagement. Export evidence packages for downstream reporting.
- Multi-target scope isolation
- Team & role-based access (RBAC)
- Exportable evidence packages
- SIEM & ticketing integrations
Key capabilities
Attack Surface Discovery
Map your full external attack surface — hosts, subdomains, cloud endpoints, and shadow IT — with continuous delta tracking.
Automated Recon Pipelines
Chain recon modules into scheduled pipelines. Trigger on asset changes or run ad-hoc for penetration testing engagements.
Web & Service Scanning
Assess HTTP/S services, open ports, TLS configurations, and exposed APIs using integrated scanner engines.
Evidence & Reporting
Generate audit-ready reports and exportable evidence packages. Native connectors for SIEM, ticketing, and CI/CD pipelines.
Scheduled & Triggered Scans
Run recurring scans on configurable cadences or trigger scans via API on new asset discovery or pipeline events.
RBAC & SSO
Granular role-based access controls with SSO and SCIM provisioning. Scope access per workspace, team, or engagement.
Compliance frameworks
Mapped controls, evidence pipelines, and reporting for enterprise requirements.
SOC 2 (Security, Availability, Confidentiality)
Trust Services Criteria for security operations
- Centralises control evidence and logs for auditors.
- Tracks remediation activity with approvals and timestamps.
- Produces executive-ready compliance exports.
ISO/IEC 27001 (Information Security Management)
International standard for ISMS controls
- Maps findings to control objectives and risk registers.
- Documents remediation and verification workflows.
- Maintains evidence for continuous assurance reviews.
PCI-DSS v4.0 (Payment Card Security)
Payment card data environment controls
- Flags posture gaps and policy violations in real time.
- Produces assessor-ready reports.
- Tracks remediation with full accountability chain.
CMMC 2.0 (Federal Contractor Readiness)
DoD cybersecurity maturity requirements
- Aligns controls to CMMC maturity level requirements.
- Maintains POA&Ms and exception documentation.
- Supports evidence collection for third-party assessors.
Pricing
RogueAgent ASPM™ is available as an add-on to CloudSignals+RiskOps™ or as part of an enterprise bundle. View full pricing →
Beta Access
Early access pricing for teams joining the beta programme. Dedicated onboarding and direct engineering support included.
Enterprise Bundle
Bundled with CloudSignals+RiskOps™, AI Signals™, and AIRE Agentic Mesh™ for a unified offensive + defensive security platform.
Compare bundlesCustomer-Hosted
Deploy within your own cloud environment. Bring your own scanner integrations, data residency, and retention policies.
Talk to salesFrequently asked questions
What scanner integrations are supported?
RogueAgent ASPM™ integrates with leading open-source engines (Nmap, Nuclei, Subfinder, FFUF) and commercial scanners via API. Custom integrations are supported via the plugin SDK.
Can I run scans on a schedule without manual triggers?
Yes. You can configure recurring scan schedules per workspace — hourly, daily, or weekly — with configurable scope and notification on new findings or asset changes.
How does RogueAgent differ from a traditional DAST tool?
RogueAgent is an ASPM platform — it combines asset discovery, multi-mode recon, and vulnerability scanning in a single workspace, rather than targeting a single app at a point in time.
What evidence outputs are available for compliance teams?
RogueAgent produces exportable evidence packages including scan manifests, finding timelines, remediation logs, and assessor-ready reports mapped to SOC 2, ISO 27001, PCI-DSS, and CMMC control requirements.
Does it integrate with CloudSignals+RiskOps™?
Yes. RogueAgent findings flow into the CloudSignals+RiskOps™ risk register, enabling unified risk scoring, remediation routing, and consolidated executive reporting across your entire security programme.
When does RogueAgent reach general availability?
GA is targeted for Q3 2026. Beta customers receive priority access, migration assistance, and locked-in beta pricing on GA release.
Map your attack surface before attackers do.
Join the RogueAgent ASPM™ beta. Early teams receive dedicated onboarding, direct engineering access, and locked-in beta pricing.