Fidem helps you choose and read the results. The self-service product, with public pricing and online activation, is continuous vulnerability scanning on defensio.technology, also available in English as continuous vulnerability scanning.
Defensio SECaaS: Attack Surface Management as a Service
Cybersecurity as a Service, with No Infrastructure
Defensio SECaaS is the cloud-hosted Attack Surface Management platform that any organization can buy directly through the defensio.technology portal. No hardware to install, no software to configure: you just provide the targets (domains, IPs, URLs) and the platform immediately starts continuous monitoring of the external attack surface. The infrastructure is hosted in an Italian data center certified by ACN (Italy’s National Cybersecurity Agency), ensuring full data sovereignty and GDPR compliance.
Unlike Defensio XT (which is installed on your own infrastructure), Defensio SECaaS is entirely cloud-hosted and managed: the whole technical infrastructure, scan engines, compute nodes and databases, is run by Fidem.
How It Works
Defensio SECaaS uses the same scan engines and the same artificial intelligence as the complete Defensio ecosystem, made accessible through a self-service web interface:
- Onboarding: the client enters the domains and assets to monitor through the portal
- Continuous Scanning: the engines start automated monitoring cycles across the entire external perimeter
- Real-Time Dashboard: results can be consulted on the proprietary dashboard, classified by severity and operational priority
- Proactive Alerting: immediate notifications when new vulnerabilities or changes in the attack surface are found
- Compliance-Ready Reporting: automatic generation of professional reports that meet regulatory standards
Included Features
Integrated Scan Engines: a proprietary multi-engine stack for continuous External Perimeter Discovery, Web App Security, Infrastructure VA, Subdomain Discovery and Asset Mapping.
AI Prioritization: every vulnerability is put in context with Cyber Threat Intelligence and prioritized on the real risk of exploitation.
Digital Identity Protection: real-time data breach monitoring for compromised credentials.
Built-in Compliance: SSL/TLS checks, DNS security controls (SPF/DKIM/DMARC) and HTTP header analysis according to OWASP standards.
White Label for MSSPs and Partners
Defensio SECaaS is available in white label for Managed Security Service Providers (MSSPs) and technology partners. Partners can offer the platform under their own brand, customizing interface, logo and reports. The technical infrastructure remains entirely managed by Fidem, with zero operational burden for the partner. Terms and price list in the Defensio partner program.
NG Reporting: Next Generation Reporting
Every Defensio product includes the NG (Next Generation) reporting engine, which turns raw scanning and monitoring data into high-fidelity professional documents. Reports are generated in a compliance-ready format with tactical visualizations, severity charts, exposure maps and prioritized operational recommendations. Available formats: Executive, Technical, Compliance, Custom.
SaaS vs XT: Which One to Choose?
- Defensio SECaaS: zero installation, the entire infrastructure, AI component included, is provided and managed by Fidem. Available online: ideal for those who want immediate monitoring with no infrastructure investment
- Defensio XT: installed on your own infrastructure, with full operational control and control of the data. It requires dedicated compute resources, including for the AI component: ideal for those who manage security in-house or for MSSPs working independently
Request access to the Defensio SECaaS platform or visit defensio.technology to explore the features.
Explore the other components: Defensio Ecosystem · Defensio SOC · Defensio Sensor · Defensio XT · Identity Shield
What “security as a service” means
It means that the technology, its updates and the people who watch over it are included in the fee: the company does not buy licenses to manage, it buys a result. It is the model that makes sense when there is no internal team able to follow a security platform every day, which is the case for the vast majority of SMEs.
What it includes and what stays out
It includes: continuous scanning of the exposed surface, updates of the checks, notification of new exposures and periodic reports that management can read too. It does not include the fix: closing a vulnerability requires access to the systems and stays with the IT provider or a remediation activity agreed separately.
When it pays off compared with a one-off assessment
When the surface changes. A vulnerability assessment takes a snapshot of a moment; if the company publishes services, opens subdomains or changes suppliers, that snapshot ages in weeks. The continuous model catches what appears afterwards. If instead the infrastructure is stable and you need an assessment for a customer or a tender, a one-off assessment is enough and costs less. Glossary.