Web assets
Add domains and subdomains. Integrated discovery helps identify related assets and keep scope up to date.
Codefend · Platform
Your digital security,
under control.
View vulnerabilities, understand their impact, and coordinate next steps from a single platform. Clear technical information that gives your team the context to act.
Findings · assets · reports · tracking
● ● ●CODEFEND / SECURITY OVERVIEW UPDATED
OVERVIEW
Last 30 days⌄Security status
Monitored assets24+3 this month
Open findings082 critical
Resolved risks16+4 this month
Priority findingsView all ↗
Remote Code Executionapi.codefend.com · Web application
CRITICALSQL Injectionportal.codefend.com · Web application
HIGHCross-Site Scripting (XSS)dashboard.codefend.com · Web application
MEDIUMA connected view
From the first finding to the final report, every detail keeps the context needed to decide what to fix, when, and in what order.
01 · Reports on demand
Information ready
to share.
Filter vulnerabilities by asset type and create reports when you need them. Bring relevant findings together in clear documents for technical teams and business stakeholders.
- Choose specific assets and findings
- Generate reports on demand
- Share priorities and next steps
● ● ●CODEFEND / REPORT BUILDER READY
REPORTS
Create a new report
Report nameSecurity assessment · Q4
Included assetsWeb applications ⌄
Critical 2High 4Medium 6
✓
12 findings selectedIncludes impact, evidence, and recommendations
● ● ●CODEFEND / ISSUES UNDER TRACKING
FINDINGS
All assets⌄Vulnerabilities
08Open
16Resolved
02Critical
FINDINGASSETRISKSTATUS
Remote Code Executionapi.codefend.comCRITICALOpen
SQL Injectionportal.codefend.comHIGHOpen
Cross-Site Scriptingdashboard.codefend.comMEDIUMUnder review
Information exposureapp.codefend.comLOWResolved
02 · Vista de vulnerabilidades
Prioritize with
the full picture.
Monitor each finding’s severity and quickly see what is active, under review, or resolved.
- Sort by risk and status
- Filter by asset type
- Track each finding’s progress
03 · Details and remediation
From evidence
to action.
Each vulnerability includes a technical description, potential business impact, remediation effort, and actionable recommendations.
- Understand the scenario and its impact
- Review supporting technical evidence
- See recommended remediation steps
● ● ●CODEFEND / ISSUE DETAILCRITICAL · 9.8
REMOTE CODE EXECUTION
● OpenRemote code execution
An unvalidated input could allow commands to run on the application server.
Remediation recommendation
Validate and restrict server-side input. Review system command usage and apply least privilege to the process.
View suggested steps ↗● ● ●CODEFEND / SCOPE ACTIVE SCOPE
ATTACK SURFACE
＋ Add assetOrganization assets
Web assetsDomains and subdomains
08›Mobile applicationsiOS and Android
03›CloudAWS · Azure · GCP
06›Internal networksSegments and IP addresses
04›Source codeRepositories and dependencies
02›PeopleAuthorized social engineering exercises
12›04 · Scope and attack surface
Define what to assess.
Expand when needed.
Organize the assets included in each assessment and adjust the scope to your organization’s priorities. The platform supports web and mobile assets, cloud and LAN infrastructure, source code, and authorized social engineering exercises.
- Add domains, subdomains, and IP addresses
- Include applications and cloud services
- Update scope as your environment changes
Platform capabilities
Un espacio para gestionar
el ciclo de evaluación.
Codefend modules connect assets, findings, reports, and expert support in one workflow.
01
Scope and attack surface
Six modules to define the assets included in each assessment.
Mobile assets
Include iOS and Android apps to assess their security and handling of sensitive information.
Cloud
Organize cloud assets across AWS, Microsoft Azure, and Google Cloud Platform.
Internal networks
Define network segments or coordinate internal access for an authorized assessment.
Source code
Review repositories, development processes, and dependencies to identify code and supply-chain risks.
People
Plan authorized social engineering exercises using the data and channels agreed for the assessment.
02
Communication and reports
Three modules to review findings, document results, and request assistance.
Findings
View issues identified across your assets and request help from each vulnerability’s detail page.
Create reports
Select assets and findings to generate detailed documents with the information your team needs.
Customer support
Submit specific security requests and coordinate support tailored to your organization.