AYAsec

AYAsec is an external attack surface scanning platform that discovers internet-facing assets and grades their security posture. It is delivered as a web application with a free trial and documentation. The platform offers six scan types: - Attack Surface Discovery: enumerates subdomains and related domains, checks liveness, fingerprints technology stacks and flags subdomain-takeover risk on dangling DNS records. - TLS/SSL Analysis: checks protocols, cipher suites, certificate validity, chain of trust, CAA records and known weaknesses such as BEAST, POODLE and Heartbleed. - HTTP Security Scanning: ZAP-based scanning with AJAX-spider crawling, active vulnerability testing, security header checks and technology fingerprinting matched against known CVEs. - Port Scanning: identifies open ports and exposed services. - DNS Security: validates SPF, DMARC, DNSSEC and MTA-STS, and checks zone-transfer and DNS takeover exposure. - Domain Credibility: checks domains and IPs against DNSBL blocklists, AbuseIPDB, Google Web Risk, AlienVault OTX and domain-age signals. Each scan receives a letter grade from A+ to F, and the results are combined into an overall grade per domain. Discovered hosts can be organized into Target Groups for batch scanning and per-host CVE lookup, with a worst-of rollup grade for the group. AYA, an assistant built on Claude, is embedded in reports to explain findings and give remediation guidance based on the scan results being viewed. Other features include scheduled re-scans, grade-drop alerts, certificate expiry warnings, PDF export, workspaces, SAML SSO, role-based access control, IP allowlisting and audit logs. The product targets security and IT teams managing multiple domains.