What does Defensio XT scan?

Defensio XT continuously scans assets exposed on the Internet: application vulnerabilities, SSL/TLS certificates, DNS configurations, HTTP security headers, subdomains and open ports. It identifies the company's external attack surface.

What is the difference between Defensio XT and Defensio SECaaS?

XT is an on-premise component installed at the client's site. SaaS is the cloud version accessed through a web portal. They use the same scan engines, but XT gives full local control of the data, while SaaS removes the need for infrastructure.

Does Defensio XT include AI?

Yes. XT includes an AI prioritization module that classifies vulnerabilities by real risk, taking into account business context, exposure and exploitability, reducing noise and focusing attention on the issues that really matter.

How does XT integrate with the SOC?

XT sends scan results to the Fidem SOC in real time. Analysts can correlate external vulnerabilities with the Sensor's internal alerts for a complete view of the company's security posture.

Fidem manages the project and the on-premise installation. The full product page is attack surface management with continuous external scanning on defensio.technology.

defensio xt

Experience, technology and security for your data for your infrastructure for your customers for your business for your digital future

Defensio XT: Continuous External Perimeter Scanning

The Standalone Solution for Continuous External Scanning

Defensio XT is the Defensio ecosystem product dedicated to continuous scanning of assets exposed on the Internet. XT works exclusively from the outside, analyzing the organization’s public perimeter exactly as a real attacker would.

Defensio XT is bought and used completely independently. You do not need the SOC, the Sensor or the SaaS platform. Like Defensio Sensor (also available separately), XT is a standalone product that can be installed on your own infrastructure, a VPS, a dedicated server or a cloud node, and work immediately as an external Attack Surface Management engine.

Continuous Attack Surface Management

While traditional vulnerability assessments are run once or periodically, Defensio XT works continuously. The engine runs automated scanning cycles that identify:

External Vulnerability Assessment: systematic identification of known vulnerabilities (CVEs) on Internet-facing assets
Subdomain Discovery: automatic mapping of forgotten, undocumented or shadow IT assets, such as cloud instances, exposed APIs and orphaned databases
SSL/TLS Security Audit: complete verification of cipher suites, supported protocols, configurations and certificate vulnerabilities
DNS Security Analysis: checks of SPF, DKIM and DMARC configurations to prevent spoofing and domain abuse
Header Security Assessment: analysis of HTTP/HTTPS headers and compliance with application security best practices
Web Application Testing: active and passive scanning of exposed web applications
External Perimeter Discovery: continuous mapping of ports, services and assets exposed on the Internet
Digital Identity Protection: monitoring of company credentials in breach databases, run locally

Operational Architecture

Each XT instance works with a dedicated public IP address, separate from the browsing address, with redundant instances for load distribution and business continuity.

XT can also be connected to the SOC: in that case its results flow into the centralized correlation together with those of the Sensors and the DENG engines, for a complete view, internal and external, of the company’s risk.

Intelligent AI Prioritization

Defensio XT includes a sophisticated AI Augmentation layer in vulnerability classification. Using global Cyber Threat Intelligence (CTI) feeds, the engine puts every single flaw in context:

If a “High” vulnerability has an exploit actively circulating, it is automatically raised to “Critical / Imminent Breach Risk”
Every finding receives a priority based on the real risk of exploitation for the specific infrastructure

Use Cases: Who Uses Defensio XT

Defensio XT is designed for any organization that manages assets exposed on the Internet and wants to verify their security continuously:

Web agencies and software houses: test the security of the websites and applications built for their clients, from a small site on shared hosting to an enterprise web application on a dedicated VPS. XT ensures every delivered project is free of known vulnerabilities before (and after) go-live.
Developers and DevOps: integrate security scanning into the development cycle. Every deploy to staging or production can be checked automatically by XT, which identifies misconfigurations, expiring certificates, missing headers and application vulnerabilities before they become a problem.
Managed Service Providers (MSP/MSSP): offer continuous external security monitoring services to their clients. XT runs independently on their own infrastructure, with full operational control and customizable reporting.
Internet Service Providers and data centers: continuously monitor their own and their clients’ exposed assets, such as IP ranges, published services and certificates, and offer external scanning as a value-added service.
Companies with distributed infrastructure: monitor dozens of domains, web applications, APIs and services exposed on the Internet from a single point of control, with automated scans and proactive alerting.
E-commerce and online platforms: ensure that the online store, the payment gateway and the API integrations are constantly protected from web vulnerabilities, SQL injection, XSS and misconfigurations.

NG Reporting: Next Generation Reporting

Every Defensio product includes the NG (Next Generation) reporting engine, which turns raw scanning and monitoring data into high-fidelity professional documents. Reports are generated in a compliance-ready format with tactical visualizations, severity charts, exposure maps and prioritized operational recommendations. Available formats: Executive, Technical, Compliance, Custom.

XT vs SaaS: Which One to Choose?

Defensio XT and Defensio SECaaS · Identity Shield cover the same area, continuous external scanning, but with very different models:

Defensio XT: installed on your own infrastructure, with full operational control and control of the data. It requires dedicated compute resources, including for the AI component: ideal for those who manage security in-house or for MSSPs that want to operate independently
Defensio SECaaS: zero installation, the entire infrastructure, AI component included, is provided and managed by Fidem. Available online at defensio.technology, ideal for those who want immediate monitoring with no infrastructure investment

Contact us to discover Defensio XT and set up your external scanning engine.

Explore the other components: Defensio Ecosystem · Defensio SOC · Defensio Sensor · Defensio SECaaS

Full product data sheet

Defensio XT is on-premise attack surface management: the full product page is on defensio.technology. If you prefer the cloud service with no installation, Defensio continuous vulnerability scanning starts from 59 euros a month.