CVE with context
CVSS, EPSS, CISA KEV and exploit information help put a vulnerability into perspective.
Arevian / digital reconnaissance
ARTHAS
Everything exposed. Every connection revealed.
Digital reconnaissance, from the first domain to a connected picture of your external infrastructure.
Explore the platform In development · request early access
01 / see the connections
Your infrastructure casts a digital shadow.
A forgotten subdomain. An exposed service. A certificate connecting two projects. Individually, they are digital traces. Together, they map what your company exposes to the internet.
Arthas brings the picture together, and helps you decide where to start.
One target. A world of connections.
Select a node: behind each address there is a source, a connection and a reason to look closer.
Interactive example · illustrative data
02 / from trace to picture
Reconnaissance across the whole perimeter.
An Oculus node takes a target through the pipeline. Findings and logs arrive as the analysis progresses, so the first connections appear before the final result.
Coverage depends on installed tools and configured keys. A pipeline phase does not mean every tool is connected.
01Subdomains and assets
Certificate logs and subdomain discovery tools extend the asset map.
crt.sh · subfinder · amass02DNS and infrastructure
Addresses, DNS records and infrastructure registration details.
DNS · RDAP · dnsx03HTTP and technologies
Web service responses and fingerprints of the technologies they run.
httpx · whatweb · webanalyze04Ports and services
Accessible ports and services responding to external connections.
connect · naabu · nmap05TLS and certificates
Certificates, domain names and TLS connection properties.
TLS · tlsx · sslscan06Links and content
Crawling pages and archived URLs reveals more of the web surface.
katana · Wayback · gau07ScreenshotsNext stages
The phase is included; storing and displaying images in the interface is still planned.
gowitness · aquatone08WAF and CDN
Signals of protection layers and content delivery networks.
wafw00f · cdncheck09Vulnerabilities
Checks of the exposed surface. Findings need review, not an automatic claim of compromise.
nuclei · nikto · retire.js10Headers and email
Security headers, email records and website metadata.
SPF · DMARC · robots.txt11External sources
Enrichment from external services when your API keys are configured.
Shodan · Censys · FOFA03 / understand the signal
Findings become understanding.
Chronos AI sees projects and the connections between them. It helps explain findings and turn questions into data queries.
Chronos AI
In this example, the domain connects to a subdomain, an IP address and a certificate. The HTTPS service leads to a headers observation. Each connection has a source you can inspect.
domain:example.comExample response · no live AI connection
Watchers
Saved queries and schedules let you review changes without repeating searches by hand.
One query language
Search, the assistant and watchers share the same fields: type, domain, risk, source, port and technology.
04 / your compute
Runs where your nodes are.
Oculus nodes run the analysis on your servers. The dispatcher assigns targets using available slots and node weights. The panel brings their results together.
SSH provisioning, a connection to the core and an action log. External sources and AI providers are configured separately.
Target queue
Dispatcher
Oculus AAnalysis slots
Oculus BAnalysis slots
05 / where we stand
A working core first. A wider view next.
Arthas is growing from a digital reconnaissance prototype. This is the state described in the project overview; public launch and access terms are still being prepared.
Already in the core
- Web analysis: domain, URL, IP, subnet
- Oculus nodes and task distribution
- Graph, CVE intelligence and Chronos AI
- Search, watchers and action audit
Next stages
- Analysis of organizations, people, email and ASN
- Screenshot storage and viewing
- Result caching and PDF reports
- Broader checks and automated tests
Before your first analysis
Is this a public service yet?
Arthas is in development. This page introduces the product with illustrative interactive examples. Early access terms are discussed with the Arevian team.
What can I add to a project?
The web pipeline covers domains, URLs, IPs and subnets; CVE intelligence is a separate tool. Email, organizations, people, ASN and Telegram are expansion targets, without their own completed analysis pipelines yet.
Which servers and keys do I need?
Oculus nodes are provisioned on your servers over SSH. Installed tools determine analysis depth. Shodan, Censys and other external services need separate API keys; the AI assistant needs a configured provider.
Can I analyze any address?
For active checks, use infrastructure you own or a scope agreed with its owner. Define the targets and permitted analysis depth in advance.
Next step
See your infrastructure from a new perspective.
Tell us which perimeter you want to understand. We'll discuss nodes, sources and the early stage of Arthas.
What happens next
- 01Define the scope
Targets, access and analysis depth.
- 02Choose a setup
Your servers, tools and sources.
- 03Discuss the early stage
Participation terms, without a promised launch date.