Dashboard

🧠 Ask Aquila... ⌘K
🧠
Quick Actions
🔴 Show critical vulnerabilities
🔐 Expiring SSL certificates
🆕 Assets added this week
⚡ KEV vulnerabilities
🚪 Unusual open ports
📧 Failed email security
Example Queries
"Show all Nginx servers with critical vulnerabilities"
"Which assets have the highest ransomware risk?"
"Find all exposed databases in production"
Press Enter to search • Esc to close
Aquila Security Score
0 Poor 300 Fair 500 Good 700 Excellent 850
24h Change
7d Change
30d Change
MTTR this week
Peer Rank Top %
Risk Velocity
Hours Saved via auto-validation

🎯 Kill Chain Funnel

Total Assets
Exposed
Vulnerable
Exploitable
Critical
High
Medium
Low
KEV Vulns
Known Exploited
Assets
Active Scans
Open Alerts

🔥 Must Fix Now

✅ No critical vulnerabilities

Vulnerability Trend

Severity Distribution

Risk Score History

Top Affected Hosts

Remediation Progress

Recent Vulnerabilities

Severity CVE Title Host EPSS KEV
No vulnerabilities found

Recent Alerts

Severity Type Title Time
No alerts
📦 Inventory
🔌 Service Catalog
🛠️ Technologies
👻 Ghost Assets
⏱️ Time Machine
⏱️

Attack Surface Time Machine

Watch your network evolve over time

🏢
Core Network

📋 Changes at this point

No changes at this point
Assets
Open Ports
Vulns
30 days ago Today
New Asset Removed Port Change Alert

👻 Ghost Asset Detector

💡 These assets have zero traffic but are still active. Shutting them down reduces attack surface.
AssetTypeLast ActivityDays IdleEst. Cost/moAction
✅ No ghost assets detected

🔌 Service Catalog

ServicePortHostsVersionRisk

🛠️ Technology Stack

Assets Inventory

Type Value Criticality Tags First Seen Last Seen Actions
🖥️
No assets yet

Add your first asset to start monitoring your attack surface.
Critical
High
In KEV
Verified

📊 EPSS vs Asset Criticality

Focus on top-right quadrant
Monitor
🔥 FIX NOW
Low Priority
Schedule
Asset Criticality →
EPSS →

🛡️ Header Hardening Matrix

Red = Missing security header
Host HSTS CSP XFO XCTO RP

🔐 SSL Certificate Runway

Certificate expiry timeline
No certificates tracked yet

Vulnerabilities

Severity CVE ID Title Host Port CVSS EPSS KEV Status Actions
✅
No vulnerabilities found

Great! Your assets appear to be secure.

⏱️ SLA Status

On Track
At Risk
Breached
Hours Saved (Auto-Validation)
this week

📋 Active Campaigns

CI/CD Builds Blocked
this week

📡 Scanner Pulse Feed

Waiting for scanner activity...

Scan History

Status Type Targets Progress Phase 🐛 🖥️ 🔧 📸 🔑 Started Duration Actions
🔍
No scans yet

Start a scan to discover your attack surface.

Alerts

Severity Type Title Asset Status Created Actions
🔔
No alerts

You're all caught up!

DNS Security Posture

Domain Grade SPF DKIM DMARC DNSSEC CAA Overall Score

📅 Drift Timeline

Asset changes correlated with events
New Assets
Removed
Port Changes

Attack Surface Changes

Risk Change Type Entity Old Value New Value Detected Reviewed Actions
🔄
No changes detected

Your attack surface is stable.

Remediation Tickets

Status Vulnerability Asset External Ticket Assigned To SLA Due Actions

🗺️ Ecosystem Data Flow

Active connections pulse when data flows
🦅
Aquila

🔌 Connector Health

📊 Event Volume (7d)

MonTueWedThuFriSatSun
CI/CD Builds Blocked
this week
vs last week
🎫

Jira

Create and sync tickets

💬

Slack

Real-time notifications

📟

PagerDuty

On-call alerting

🔗

Webhooks

Custom integrations

🎯 Compliance Radar

Gap analysis across frameworks
NIST: % CIS: % ISO: %

📈 Q/Q Comparison

Before and After View
Attack Surface
→ +10%
Vulnerabilities
→ -20%
MTTR (hours)
→ -51%
Aquila Score
→ +24%

📦 Vendor Risk Summary

📄

"Board Ready" One-Pager

Auto-generated executive summary with zero jargon

📊 Executive Summary

High-level overview for leadership

🔍 Technical Report

Detailed vulnerability findings

⚖️ Compliance Report

Framework mapping (NIST, CIS, ISO)

🔧 Remediation Progress

SLA compliance and MTTR metrics

Subdomain Map
Typosquatting
DNS Hygiene
SPF
Email sender verification
DKIM
Email signing
DMARC
Policy enforcement
DNSSEC
DNS integrity
CAA
Certificate authority
BIMI
Brand logo

Discovered Subdomains

SubdomainIPStatusTech StackFirst Seen

Lookalike Domains Detected

DomainTypeSimilarityStatusRisk
👤
Identity Exposure
Compromised credentials and exposed secrets from CTI sources
🔓
Compromised Credentials
Found in breach databases
🔑
Exposed API Keys
Found in public repos
👔
VIP Exposures
C-Suite & Admins
🚪
Exposed Portals
Login interfaces

Exposure Details

TypeIdentitySourceRiskDiscoveredActions
🛡️
No exposures detected

Your identities appear secure.
📸
Evidence Locker
Visual reconnaissance, secrets, and proof-of-concept evidence
Verified
Pending
Screenshots
JS Secrets
CT Discoveries
OAST Callbacks

Visual Reconnaissance Gallery

📸
No screenshots yet

Run a full scan with Visual Recon enabled to capture screenshots

🔑 JavaScript Secrets & API Endpoints

Type Secret/Endpoint Source File Target Severity Actions
🔑
No secrets discovered

JS mining will extract API keys and endpoints from JavaScript files during scans

📜 Certificate Transparency Discoveries

Subdomains discovered via CT logs (crt.sh)
Subdomain Parent Domain First Seen Issuer Status Actions
📜
No CT discoveries

Certificate Transparency monitoring will find subdomains from public CT logs

🐤 OAST Canary Callbacks

Blind vulnerability detection via out-of-band interactions
⚠️ Critical: OAST callbacks indicate potential blind vulnerabilities (SSRF, Log4j, XXE, etc.)
Time Type Source IP Payload Location Correlation ID Actions
🐤
No canary callbacks

OAST tokens are injected into scan requests to detect blind vulnerabilities

Active canary token:

All Evidence

TypeVulnerabilityHostCollectedStatusActions
📁
No evidence collected

Evidence is automatically collected during vulnerability scans
🎯
Remediation Campaigns
Group vulnerabilities into projects and track ticket status

Q1 SSL/TLS Upgrade

In Progress
Due: Feb 28, 2026
23
Total
12
Fixed
8
In Progress
3
Open

Critical CVE Response

Urgent
Due: Jan 31, 2026
5
Total
2
Fixed
1
In Progress
2
Open

Jira/ServiceNow Sync

Connected
TicketVulnerabilityJira StatusAssigneeSLASync
⚖️
Compliance Center
Map findings to frameworks and generate audit reports
NIST CSF
78%
Compliance Score
CIS Controls
82%
Compliance Score
ISO 27001
71%
Compliance Score
PCI DSS
65%
Compliance Score

Control Mapping

Control IDControl NameStatusFindingsEvidence
PR.AC-1 Identities and credentials managed Compliant 0 ✅ Automated
PR.DS-1 Data-at-rest is protected Partial 3 ⚠️ Manual review needed
PR.IP-1 Baseline config maintained Non-Compliant 7 ❌ Missing evidence
🌍
WebGL Globe
Asset Geo-Distribution
Assets
Critical

Asset Distribution

RegionAssetsCriticalHighCoverage
🇺🇸 North America 142 5 12
🇪🇺 Europe 87 2 8
🌏 Asia Pacific 34 1 3
General
Scanner Profiles
User Management
API Keys

General Settings

Scanner Profiles

ProfileTypeRate LimitPortsDefault
Stealth Low & Slow 100 pps Top 100 ⚪
Standard Balanced 1000 pps Top 1000 🔵
Aggressive Full Speed Unlimited All 65535 ⚪

API Keys

NameKeyPermissionsCreatedActions
CI/CD Pipeline aq_live_****...****7f2a read:scans Jan 15, 2026

👥 User Management

Role Access Matrix

Role View Scan Edit Admin
Read-Only
Analyst
Developer
Admin

📜 Recent Activity

2:45 PM Admin Alice Changed scan frequency to Daily
1:30 PM John D. Generated new API key
11:00 AM System Auto-upgraded Nuclei templates

⛽ Scan Quota

85%
Used
8,500 / 10,000 scans this month

🎚️ Scanner Intensity

🐢 Stealth ⚖️ Balanced 🚀 Aggressive
Balanced: 1000 pps, Top 1000 ports, Rate-limited