01 · Continuous discovery
Sight
Give Saluki a name. It maps everything that name exposes: domains, cloud, certificates, services, identities. The map stays current as the estate changes.
02Platform / Signal
Know what an adversary would use first.
Thermal prioritisation turns a sprawling inventory into a short list. Every exposure is scored with threat intelligence that updates as the threats aimed at your sector change.
RS
| Heat | Exposure | Type | Owner | Status | Last seen |
|---|---|---|---|---|---|
| 91 | Admin panel reachable from the internetPR-0917vpn-02.brackwell.example | VPN | PT | Verified | 2 min ago |
| 86 | Legacy API accepts expired tokensPR-0914api-legacy.brackwell.example | API | PT | Testing | 9 min ago |
| 82 | Public storage bucket lists objectsPR-0908assets-eu.brackwell-cloud.example | Storage | CO | Retest | 1 h ago |
| 78 | SSO metadata exposes internal hostPR-0902sso.brackwell.example | Identity | ID | Testing | 2 h ago |
| 74 | Mail relay accepts unauthenticated relayPR-0896mx-02.brackwell.example | IT | Verified | 8 h ago | |
| 71 | Monitoring reachable without authenticationPR-0891grafana.ops.brackwell.example | Monitoring | PT | Retest | 6 h ago |
| 66 | Database port open to the internetPR-0885db-eu-03.brackwell-cloud.example | Database | DT | Watching | 2 h ago |
| 61 | Expired certificate on edge nodePR-0879cdn-03.brackwell-cloud.example | CDN | ED | Watching | 3 h ago |
| 57 | Admin console on acquired brandPR-0872admin.harbourfleet.example | Admin panel | HF | Testing | 5 h ago |
| 52 | Directory listing enabledPR-0866docs.harbourfleet.example | Web app | HF | Retest | 5 h ago |
| 44 | Verbose errors leak stack tracesPR-0859preview-14.brackwell-cloud.example | Web app | CO | Watching | 31 min ago |
| 38 | Supplier endpoint without rate limitingPR-0848api.ashcombe-supply.example | API | VM | Watching | 11 h ago |
1-12 of 148Updated 4 s ago
01Intelligence-led targeting
Heat is a number with reasons attached.
Saluki Labs tracks the actors and techniques aimed at your sector. Signal scores every exposure by likelihood, reachability and impact, shows the three factors behind each score, and recomputes the moment your surface or the threat picture changes. The team gets a short list, and the reason for every line on it.
- Likelihood
- Is this technique in active use against organisations like yours?
- Reachability
- How many hops from the public internet, and through what?
- Impact
- What would an adversary hold if this worked?
- Refresh
- Recomputed on every surface change and every intelligence update
PR-0917CriticalAdmin panel reachable from the internetvpn-02.brackwell.example
Heat91Critical
- Critical90–100
- Hot70–89
- Warm40–69
- Cool0–39
Why it is critical
3 factors- Likelihood88Technique seen in the wild
- Reachability97Public internet, one hop
- Impact89Standard user → Administrator
02Features
- 01
Every exposure has a temperature
Heat combines likelihood, reachability and impact, and recalculates as your surface and the threats aimed at you move. Hot means act now. Cool means we are watching.
Live PR-0917CriticalAdmin panel reachable from the internetvpn-02.brackwell.exampleHeat91Critical- Critical90–100
- Hot70–89
- Warm40–69
- Cool0–39
Why it is critical
3 factors- Likelihood88Technique seen in the wild
- Reachability97Public internet, one hop
- Impact89Standard user → Administrator
- 02
Intelligence-led
Saluki Labs tracks the actors, campaigns and techniques relevant to your sector. When a technique lands, the heat changes before your next meeting.
Live Intelligence update · technique now in active useSaluki LabsHeat Exposure Status 82 Public storage bucket lists objects Retest 66 Database port open to the internet Watching 91 Admin panel reachable from the internet Verified 74 Mail relay accepts unauthenticated relay Verified 86 Legacy API accepts expired tokens Testing 78 SSO metadata exposes internal host Testing - 03
Ahead of the next vulnerability
When a new vulnerability emerges, Signal already knows which of your assets sit in its path, and Pursuit starts there.
Live Thermal scan
Exposures 148Hot 07Retesting 03
In the loop
Signal runs the Identify step and hands a ranked, explained short list to Pursuit.
In the loop
- 01 · WatchSight
- 02 · IdentifySignal
- 03 · EmulatePursuit
- 04 · StrengthenResolve
Specifications
Signal
Thermal prioritisation
- Inputs
- Inventory, exposure history, threat intelligence, business context
- Output
- Heat 0 to 100 per exposure, with the reasons
- Refresh
- Continuous
- Explainability
- Every score shows its factors