CyberDefence Platform

Registration & Login

Creating an Account

1. Navigate to the platform URL and click Sign Up
2. Enter your email, full name, organization, and password
3. Your account will be created with the analyst role by default
4. Log in with your email and password

Password Reset

If you forget your password, click Forgot Password on the login page. Enter your email address and a reset link will be generated. An admin can also force-reset your password from the Admin Panel.

Dashboard

The Dashboard is your command center — showing a real-time overview of your security posture.

What You'll See

• Security Score Ring — Overall score (0-100) based on latest scan results
• Vulnerability Summary — Breakdown by severity: Critical, High, Medium, Low
• Score Trend Chart — Historical security score over time
• Recent Scan History — Last 10 scans with target, module, and timestamp
• Threat Globe — Visual representation of threat sources

From the dashboard, you can quickly navigate to start a new scan or view detailed results.

Running a Scan

To scan a target for vulnerabilities and security issues:

1. Navigate to New Scan from the sidebar
2. Enter the target domain (e.g., example.com) or IP address (e.g., 192.168.1.1)
3. Select a Scan Mode (see below)
4. Click Start Scan
5. Watch real-time progress as each module completes

Scan Modes

Custom Mode Modules

• Port Discovery — Scan for open ports and services
• SSL/TLS — Certificate and encryption analysis
• Asset Mapping — Discover subdomains and related assets
• DNS — DNS record enumeration
• OSINT — Open-source intelligence gathering
• SQLi — SQL injection testing

Live Tracker

The Live Tracker provides real-time visibility into ongoing scans.

• Progress bar — Overall scan completion percentage
• KPIs — Live counters for threats neutralized, open ports found, and vulnerabilities detected
• Module status — See which module is currently running
• Auto-refresh — Updates every 2 seconds until the scan completes

You can navigate directly to the Live Tracker from a running scan, or enter a Job ID to track a specific scan.

Threat Map

Visualize global threats and scan targets on an interactive 3D map.

• Real-time Visualization — See global activity and origin of threats
• Interactive Globe — Rotate, zoom, and explore geographic threat distribution

Score Dashboard

Provides an in-depth breakdown of your security score across multiple vectors:

• Vector Analysis — Network, Application, Endpoint, and Cloud security scores
• Historical Trends — Track your security posture improvements over time
• Risk Distribution — Visual metrics showing current risk levels

Vulnerabilities

The Vulnerability Assessment module performs deep scanning using multiple engines:

• Nuclei Scanning — Template-based vulnerability detection (CVEs, misconfigurations)
• CMS Plugin Check — WordPress/CMS plugin vulnerability analysis (WPScan)
• SSL/TLS Analysis — Certificate issues, weak ciphers, protocol vulnerabilities

Severity Levels

Defence Analysis

The Defence module evaluates your target's security posture by checking:

• Security Headers — Content-Security-Policy, X-Frame-Options, HSTS, etc.
• SSL/TLS Configuration — Protocol versions, cipher suites, certificate validity
• Server Configuration — Server version disclosure, directory listing, etc.
• Cookie Security — HttpOnly, Secure, SameSite flags

Results are presented with a score and specific recommendations for improvement.

VirusTotal

Checks your target's reputation across 70+ antivirus engines and security services.

• Domain/URL reputation — Is the target flagged as malicious?
• Detection ratio — How many engines flag the target
• Historical analysis — Past detections and community votes

Shodan Intel

Shodan provides intelligence on internet-facing assets:

• Open Ports & Services — What's exposed to the internet
• Technology Stack — Detected software versions
• Known Vulnerabilities — CVEs associated with detected services
• Geolocation — Physical location of the target infrastructure

AbuseIPDB

Checks IP addresses against AbuseIPDB's threat intelligence database:

• Abuse Confidence Score — How likely the IP is malicious (0-100%)
• Report History — Number of abuse reports filed
• Categories — Types of abuse reported (brute force, spam, DDoS, etc.)
• ISP & Country — Network provider information

SIEM

The SIEM (Security Information and Event Management) module provides:

• Event Analysis — Security events and anomalies detected during scanning
• Log Correlation — Cross-referencing findings across multiple scan modules
• Threat Timeline — Chronological view of security events
• Analytics Dashboard — Visual breakdown of event types and severity

Security Tools

A comprehensive suite of specialized security utilities available on-demand:

• DNS Analyzer — Deep DNS record enumeration and analysis
• OSINT Aggregator — Open-source intelligence gathering across multiple sources
• CVE Search — Lookup vulnerabilities by CVE ID, vendor, or product
• File Scanner & Hash Identifier — Analyze files and identify unknown hashes
• Network Tools — Port Scanner, PCAP Analyzer, Subdomain Enum
• Web Tools — Headers Inspector, WAF Fingerprinter, Dir Brute-Forcer, JWT & SSL Analyzers
• Incident Response — Manage IOCs (Indicators of Compromise) and track security incidents
• Cert Monitor — Track SSL/TLS certificate expirations and validity
• Honeypot Detector — Identify potential deceptive network components

AI Analyst

Leverage artificial intelligence to analyze scan results, decode complex payloads, and provide remediation advice using natural language.

Compliance

Evaluate your infrastructure against industry standards (e.g., PCI-DSS, HIPAA, GDPR, SOC2) and generate compliance reports with pass/fail metrics.

Threat Intel & Breach Monitor

Stay updated on the latest global threat advisories and monitor if your organization's domains or emails have been exposed in known data breaches.

Attack Surface & Assets

• Attack Surface — Automatically map your external footprint, exposed services, and potential entry points.
• Asset Manager — Track, categorize, and monitor all organizational assets (servers, domains, IP blocks) in one central inventory.

Audit Log

A tamper-evident, centralized log of all significant actions within the platform, crucial for compliance and accountability.

PDF Reports

Generate professional security assessment reports for your stakeholders.

How to Generate

1. Navigate to PDF Generator from the sidebar
2. Enter the Organization Name (appears on report header)
3. Enter the Target (domain/IP that was scanned)
4. Enter the Author name
5. Click Generate Report

Report Contents

• Executive summary with overall security score
• Vulnerability findings by severity
• Defence configuration analysis
• Recommendations and remediation steps
• Technical details for each finding

Reports History

View all previously generated reports. Each entry shows:

• Target domain/IP
• Organization name
• Author
• Generation date
• Download link (if PDF was generated)

Scheduled Scans

Automate recurring security scans on your targets.

Creating a Schedule

1. Navigate to Schedules from the sidebar
2. Click New Schedule
3. Enter the target domain or IP
4. Choose a scan mode (Quick, Standard, Comprehensive)
5. Select frequency: daily, weekly, or monthly
6. Save the schedule

Managing Schedules

• Toggle — Enable/disable a schedule without deleting it
• Delete — Permanently remove a schedule
• View — See next run time and last run results

Webhooks

Get notified when scans complete or critical vulnerabilities are found.

Setting Up

1. Go to Settings from the sidebar
2. Under Webhooks, enter your webhook URL (e.g., a Slack incoming webhook)
3. Choose notification triggers:
   • Notify on Complete — Get notified when any scan finishes
   • Notify on Critical — Get alerted only for critical findings
4. Click Add Webhook
5. Use Test to verify it's working

Teams

Collaborate with your team by sharing scan results and managing access.

Creating a Team

1. Navigate to Teams from the sidebar
2. Click Create Team
3. Enter a team name

Managing Members

• Invite — Add members by email with a role (admin, member, viewer)
• Remove — Remove members from the team
• Share Scans — Share scan results with team members

Team Roles

Admin Panel

The Admin Panel provides full system control (requires admin role).

System Stats

At-a-glance metrics: total users, active users, total scans, failed logins (24h), successful logins (24h).

User Management

• View all users — Search and filter by email or name
• View details — See a user's scan history and login attempts
• Change role — Promote/demote between admin, analyst, viewer
• Disable/Enable — Temporarily disable an account without deleting it
• Force Password Reset — Generate a new reset token for a user
• Delete — Permanently remove a user and all their data

Scan Management

• View all recent scans across all users
• Delete individual scans

API Keys Configuration & Vault

Securely manage and configure external credentials in the API Key Vault:

• Shodan API Key
• AbuseIPDB API Key
• VirusTotal API Key
• WPScan API Key
• OpenAI API Key (for AI Analyst)

Plugins

Extend the platform's functionality by browsing and enabling custom Plugins from the internal marketplace.

Settings

The Settings page shows:

• System Health — API status (online/offline)
• Your Profile — Email, name, organization, role
• Webhook Management — Add, test, and delete webhooks

Roles & Permissions

CyberDefence Platform © 2025. Built for security professionals.