Qingteng Wanxiang (Host Adaptive Security Platform)

Wanxiang is a host adaptive security platform from Qingteng Cloud Security, with this page focused on its Risk Assessment (风险发现) module. The module uses an agent-based, white-box scanning approach installed on hosts to continuously discover vulnerabilities, missing patches, weak passwords, and configuration flaws across servers and applications. Key capabilities described: - Detects missing critical patches by scanning applications, kernel modules, and installed packages against a continuously updated patch database - Identifies application configuration defects by comparing them against known attack paths, helping block potential intrusion routes - Detects newly disclosed vulnerabilities in systems and applications by continuously tracking domestic and international security advisories and exploit techniques, matching findings against a vulnerability database - Performs weak password detection for multiple application types including SSH, Tomcat, MySQL, and Redis, using offline cracking methods and supporting custom dictionaries Product characteristics highlighted: - Comprehensive vulnerability discovery across IT systems to provide a full risk view before attackers exploit issues - White-box (agent-based) scanning approach claimed to have lower false-positive rates and broader coverage than black-box scanners - One-command agent deployment intended to be faster than traditional scanners - Automatic correlation of scan results with asset inventory data to support downstream risk remediation The vendor states the platform is used by over 1,000 large enterprise customers across more than 10 million servers, and cites metrics such as sub-100-hour vulnerability response time and a vulnerability database exceeding 20,000 entries.