Mangudai Security & Scanning Methodology
Understand how Mangudai conducts external attack surface assessment, non-destructive vulnerability identification, and data protection.
1. Non-Destructive Assessment Guarantee
Mangudai performs non-destructive, passive-first external security assessments. Our scanners inspect publicly reachable endpoints, DNS records, TLS certificates, HTTP headers, and known public CVE vulnerability databases without attempting exploitation or disrupting business operations.
2. Assessment Scope & Boundaries
Included in Assessment
- Public DNS records & Subdomain enumeration
- SSL/TLS certificate chain & expiry checking
- HTTP response headers & security policy audit
- Exposed network ports & public service banners
- Known public CVE vulnerability matching
- Email domain security (SPF, DMARC, DKIM records)
Strictly Excluded
- Active exploitation or Denial of Service (DoS/DDoS)
- Credential brute-forcing or credential stuffing
- Database payload injection execution
- Internal network pivoting or lateral movement
- Unauthorized data extraction or modification
3. Authorization & Consent Verification
Mangudai requires all users to explicitly confirm authorization before initiating automated scans on target assets. For advanced vulnerability scanning and continuous monitoring, targets can be verified via DNS TXT records or well-known HTTP file verification.
4. Data Encryption & Confidentiality
All scan telemetry, asset databases, and vulnerability findings are encrypted at rest using AES-256 and in transit via TLS 1.3. Scan results are strictly private to your user organization and are never sold or shared with third parties.
Ready to Assess Your External Security Exposure?
Start with a free, safe assessment of your domain in under 60 seconds.
Start Free Security Check