AkadeniaAkadenia
Services
Technologies
Products
Industries
Case Studies
AWS Partner
Let's Talk
Akadenia
Services
Technologies
Products
Industries
Case Studies
AWS Partner
Let's Talk
PostsContact Us
TechnologiesCase Studies
FAQs
  • Case Studies
    • Perimeter
    • Prōjectagram
    • Savvly
    • See all →
  • Posts
    • How to Choose a Software Development Partner
    • Amazon Bedrock in a Real-Time Public Safety Platform
    • Leveraging PG_NOTIFY for Real-Time Postgres Update Alerts
    • See all →
  • Packages
    • Akadenia API
    • Akadenia Azure Storage
    • Akadenia Helpers
    • Akadenia Logger
    • See all →
  • Industries
    • HealthTech
    • FinTech
    • AI
    • See all →
Company
  • Services
  • About Us
  • Products
  • Technologies
  • Capabilities
  • FAQs
  • Contact us

Stay in the loop

Akadenia
© 2018-2026 CHLELA INC. dba Akadenia. All rights reserved.·Privacy Policy·Cookie Policy·Terms and Conditions

Akadenia Security

Continuous external security scanning for the hosts and domains you own, with findings mapped to OWASP and NIST, email security reporting, and alerts when something changes.

Version1.0.0
PricingFreemium

Compatibility

BrowsersChrome, Firefox, Safari, Edge
MobileSupported

Support

  • Emailsecurity@akadenia.com
  • DocsView

Key Features

Scheduled and on-demand external scans across 11 scanners
New, changed and resolved findings tracked on every run
Known CVEs matched to detected software versions
OWASP Top 10, NIST SP 800-53 and NIST CSF 2.0 mapping
DMARC and SMTP TLS reports, plus hosted MTA-STS
Lookalike domain monitoring with registration details and screenshots
Email, Slack and signed webhook alerts
Team roles, risk acceptance with review dates, and CSV export
Akadenia pentest reports in the dashboard and as a branded PDF
Scans only run after DNS proves you control the target

Trusted by Clients

Sage Road Research

Sage Road Research

sageroadresearch.com
Eagan Real Estate

Eagan Real Estate

eaganrealestateinc.com
Perimeter

Perimeter

perimetermap.com
Just Pallets

Just Pallets

justpallets.com
Akadenia Security shows you what attackers can see before they do. It runs continuous external scans against the hosts and domains you own, tracks every finding over time, maps each one to the frameworks you report on, and tells you when something changes. It is free to start: sign up, confirm your email and add your first target.

What It Does

Scheduled External Scans

Eleven scanners cover open ports and services, web server weaknesses, known CVEs and exposures, TLS configuration and certificates, the software and firewall in front of a site, SSH cryptography, email spoofing protection, lookalike domains and publicly known subdomains. Scans run on the schedule you set, or on demand with Scan now.

Findings Tracked Over Time

Every run is compared with the last, so you see new, changed and resolved findings with a full history per target. Detected software versions are matched against known CVEs.

Mapped to the Frameworks You Report On

Each finding is tagged with its OWASP Top 10 category, NIST SP 800-53 controls and NIST CSF 2.0 categories, linked to the official guidance.

Email Security You Can See

Send your domain's DMARC and SMTP TLS reports to Akadenia Security and read them per domain: who sends as you, what fails and why. We can host your MTA-STS policy too, so moving to enforce is a switch, not a project.

Lookalike Domains

Find registered domains that look like yours and could be used for phishing, with who registered them, whether they can receive mail and a screenshot of their site. Unregistered lookalikes are listed too, so you can claim them before someone else does.

Alerts Where You Work

Get email, Slack and signed webhook alerts when findings change, with severity front and center, either right away or as a daily or weekly digest. Send a test alert before you rely on it.

Triage as a Team

Invite owners, admins, analysts and viewers. Mark a finding as an accepted risk or a false positive with a reason and a review date. Every decision is logged, and findings export to CSV or plain text.

Expected Ports as a Baseline

Tell us which ports should be open. Anything else that opens is flagged as unexpected, so a new exposure stands out.

One Report per Target

See a target's latest results by topic (lookalike domains, subdomains, email, TLS, ports, web and SSH) alongside the history of every scan: what ran, when, and what changed.

Client-Ready Pentest Reports

When Akadenia runs a pentest for you, the report lands in the same dashboard: scope, findings with retests and the tests run, reviewed and approved by Akadenia, and downloadable as a branded PDF.

Scanners

Every scanner is available on every plan, and each one only runs once DNS proves you control the target.

  • Nmap: open TCP ports and the software answering on each, ports beyond your expected baseline, and plain HTTP that does not redirect to HTTPS.
  • Nikto: default, backup and sensitive files, outdated server software, missing security headers and risky HTTP methods.
  • Nuclei: known CVEs, exposed admin panels, configs and backups, and misconfigurations, using non-intrusive templates only (no DoS, fuzzing, brute force or out-of-band checks).
  • testssl.sh: protocol versions, cipher strength, forward secrecy, the certificate chain and known TLS flaws such as Heartbleed and ROBOT.
  • WhatWeb: the web server, language, framework, CMS and JavaScript libraries, with versions matched against known CVEs.
  • wafw00f: whether a web application firewall or CDN sits in front of the site, and which one.
  • Subfinder: subdomains that certificate transparency and DNS datasets know about, and new ones as they appear. Nothing is sent to your hosts.
  • ssh-audit: weak key exchange, host key, cipher and MAC algorithms, using one handshake on port 22 and no login.
  • checkdmarc: SPF and DMARC records and policies, MTA-STS, SMTP TLS reporting and DNSSEC, from public DNS.
  • dnstwist: typo, homoglyph and other-TLD lookalikes of your domain, which of them can receive mail, and new registrations as they happen.
  • ZAP: a passive crawl of up to 5 minutes for Content Security Policy, HSTS and other headers, cookie flags, information leaks and third-party scripts without integrity checks. No active attack scan.

How It Works

  1. Add a target. The host, URL or IP address you want watched, and who authorized testing it.
  2. Prove you control it. Publish a DNS TXT record. Scans only run once ownership is verified.
  3. Schedule scans. Pick the checks and how often they run.
  4. Get findings and alerts. Review findings in the dashboard and get told when something changes.

Pricing

Start free and pay only for what you add. The free tier is not a trial and needs no card.

FreePay-as-you-goEnterprise
Domains1$58 a month each after the firstCustom
Targets55 per domain, then $10 a month eachCustom
Team membersUnlimitedUnlimitedUnlimited
Scheduled scans, up toWeeklyDailyEvery 5 minutes
Scan nowNone10 a month per domain, then $4 a runUnlimited

The free tier stops scanning at its limits, so you can't be charged by surprise. Pay-as-you-go has a monthly spending cap ($500 unless you change it) and is billed to a card or to your AWS bill through AWS Marketplace. Enterprise is a contract or a private offer on AWS Marketplace.

A domain is a registered domain and every host under it; an IP address counts as a domain of its own. Charges are prorated by the day in US dollars, plus any sales tax or VAT. See the pricing page for a cost estimate and the full feature list, or talk to us about Enterprise.

Only What You're Authorized to Test

  • Recorded authorization. Every target records who authorized testing it.
  • Verified ownership. Scanning only starts once DNS proves you control the host.
  • No internal targets. Private and internal addresses are refused unless Akadenia approves an exception.
  • Isolated data. Results are stored in AWS (us-west-2), and each organization's data is isolated from every other's.
  • Real deletion. Deleting a target or your organization removes its data for good.
Get started with Akadenia Security