CyberDefence Platform

Registration & Login

Creating an Account

1. Navigate to the platform URL and click Sign Up
2. Enter your email, full name, organization, and password
3. Your account will be created with the analyst role by default
4. Log in with your email and password

Password Reset

If you forget your password, click Forgot Password on the login page. Enter your email address and a reset link will be generated. An admin can also force-reset your password from the Admin Panel.

Dashboard

The Dashboard is your command center — showing a real-time overview of your security posture.

What You'll See

• Security Score Ring — Overall score (0-100) based on latest scan results
• Vulnerability Summary — Breakdown by severity: Critical, High, Medium, Low
• Score Trend Chart — Historical security score over time
• Recent Scan History — Last 10 scans with target, module, and timestamp
• Threat Globe — Visual representation of threat sources

From the dashboard, you can quickly navigate to start a new scan or view detailed results.

Running a Scan

To scan a target for vulnerabilities and security issues:

1. Navigate to New Scan from the sidebar
2. Enter the target domain (e.g., example.com) or IP address (e.g., 192.168.1.1)
3. Select a Scan Mode (see below)
4. Click Start Scan
5. Watch real-time progress as each module completes

Scan Modes

Custom Mode Modules

• Port Discovery — Scan for open ports and services
• SSL/TLS — Certificate and encryption analysis
• Asset Mapping — Discover subdomains and related assets
• DNS — DNS record enumeration
• OSINT — Open-source intelligence gathering
• SQLi — SQL injection testing

Live Tracker

The Live Tracker provides real-time visibility into ongoing scans.

• Progress bar — Overall scan completion percentage
• KPIs — Live counters for threats neutralized, open ports found, and vulnerabilities detected
• Module status — See which module is currently running
• Auto-refresh — Updates every 2 seconds until the scan completes

You can navigate directly to the Live Tracker from a running scan, or enter a Job ID to track a specific scan.

Vulnerabilities

The Vulnerability Assessment module performs deep scanning using multiple engines:

• Nuclei Scanning — Template-based vulnerability detection (CVEs, misconfigurations)
• CMS Plugin Check — WordPress/CMS plugin vulnerability analysis (WPScan)
• SSL/TLS Analysis — Certificate issues, weak ciphers, protocol vulnerabilities

Severity Levels

Defence Analysis

The Defence module evaluates your target's security posture by checking:

• Security Headers — Content-Security-Policy, X-Frame-Options, HSTS, etc.
• SSL/TLS Configuration — Protocol versions, cipher suites, certificate validity
• Server Configuration — Server version disclosure, directory listing, etc.
• Cookie Security — HttpOnly, Secure, SameSite flags

Results are presented with a score and specific recommendations for improvement.

VirusTotal

Checks your target's reputation across 70+ antivirus engines and security services.

• Domain/URL reputation — Is the target flagged as malicious?
• Detection ratio — How many engines flag the target
• Historical analysis — Past detections and community votes

Shodan Intel

Shodan provides intelligence on internet-facing assets:

• Open Ports & Services — What's exposed to the internet
• Technology Stack — Detected software versions
• Known Vulnerabilities — CVEs associated with detected services
• Geolocation — Physical location of the target infrastructure

AbuseIPDB

Checks IP addresses against AbuseIPDB's threat intelligence database:

• Abuse Confidence Score — How likely the IP is malicious (0-100%)
• Report History — Number of abuse reports filed
• Categories — Types of abuse reported (brute force, spam, DDoS, etc.)
• ISP & Country — Network provider information

SIEM

The SIEM (Security Information and Event Management) module provides:

• Event Analysis — Security events and anomalies detected during scanning
• Log Correlation — Cross-referencing findings across multiple scan modules
• Threat Timeline — Chronological view of security events
• Analytics Dashboard — Visual breakdown of event types and severity

PDF Reports

Generate professional security assessment reports for your stakeholders.

How to Generate

1. Navigate to PDF Generator from the sidebar
2. Enter the Organization Name (appears on report header)
3. Enter the Target (domain/IP that was scanned)
4. Enter the Author name
5. Click Generate Report

Report Contents

• Executive summary with overall security score
• Vulnerability findings by severity
• Defence configuration analysis
• Recommendations and remediation steps
• Technical details for each finding

Reports History

View all previously generated reports. Each entry shows:

• Target domain/IP
• Organization name
• Author
• Generation date
• Download link (if PDF was generated)

Scheduled Scans

Automate recurring security scans on your targets.

Creating a Schedule

1. Navigate to Schedules from the sidebar
2. Click New Schedule
3. Enter the target domain or IP
4. Choose a scan mode (Quick, Standard, Comprehensive)
5. Select frequency: daily, weekly, or monthly
6. Save the schedule

Managing Schedules

• Toggle — Enable/disable a schedule without deleting it
• Delete — Permanently remove a schedule
• View — See next run time and last run results

Webhooks

Get notified when scans complete or critical vulnerabilities are found.

Setting Up

1. Go to Settings from the sidebar
2. Under Webhooks, enter your webhook URL (e.g., a Slack incoming webhook)
3. Choose notification triggers:
   • Notify on Complete — Get notified when any scan finishes
   • Notify on Critical — Get alerted only for critical findings
4. Click Add Webhook
5. Use Test to verify it's working

Teams

Collaborate with your team by sharing scan results and managing access.

Creating a Team

1. Navigate to Teams from the sidebar
2. Click Create Team
3. Enter a team name

Managing Members

• Invite — Add members by email with a role (admin, member, viewer)
• Remove — Remove members from the team
• Share Scans — Share scan results with team members

Team Roles

Admin Panel

The Admin Panel provides full system control (requires admin role).

System Stats

At-a-glance metrics: total users, active users, total scans, failed logins (24h), successful logins (24h).

User Management

• View all users — Search and filter by email or name
• View details — See a user's scan history and login attempts
• Change role — Promote/demote between admin, analyst, viewer
• Disable/Enable — Temporarily disable an account without deleting it
• Force Password Reset — Generate a new reset token for a user
• Delete — Permanently remove a user and all their data

Scan Management

• View all recent scans across all users
• Delete individual scans

API Keys Configuration

Configure external service API keys from the admin panel:

• Shodan API Key
• AbuseIPDB API Key
• VirusTotal API Key
• WPScan API Key
• NVD API Key

Settings

The Settings page shows:

• System Health — API status (online/offline)
• Your Profile — Email, name, organization, role
• Webhook Management — Add, test, and delete webhooks

Roles & Permissions

CyberDefence Platform © 2025. Built for security professionals.