Slack
Notifications to your chosen channels.
Vulnerability, intelligence and service monitoring platform
Track vulnerabilities affecting your organisation in order of priority.
Identify vulnerabilities affecting your inventory, prioritise them and track remediation. Manage threat intelligence and research in the same panel.
Inventory matching
Kullandığınız ürün ve sürümlere odaklanın.
Risk priority
KEV, EPSS ve varlık bilgisiyle değerlendirin.
Team notifications
İlgili bulguyu sorumlu ekibe iletin.
Remediation tracking
Aksiyonu ve uygulanan çözümü kaydedin.
Take a closer look
From inventory to remediation, in one workspace.
Choose a screen to explore that part of the product and how to use it.
Your organisation's products and versions
Start monitoring with your inventory.
Define the products you use, their installed versions and responsible teams. Assess published vulnerabilities in that context.
- Asset records with vendor and product suggestions
- Full version, responsible team and asset criticality
- Track missing versions and matches requiring review
What risk means for your organisation
See which finding to address first.
Review CVSS, CISA KEV and EPSS alongside asset criticality and internet exposure. Set priorities according to your organisation's circumstances.
- Critical, high, medium and low severity levels
- Priority scores based on KEV, EPSS and asset context
- Distinguish exact matches from records requiring review
From finding to remediation record
Assign responsibility and track remediation.
Add an assignee, due date and action note to a finding. Track overdue work, pending reviews and completed remediation in the same workflow.
- Assignees, due dates and action notes
- Remediation evidence and updated version records
- Time-limited risk acceptance with expiry dates and administrator approval
Software components and dependencies
Include your components in vulnerability monitoring.
Import your software bill of materials and review package matches against OSV records. Use manual uploads or CI imports for components.
- CycloneDX JSON/XML and SPDX JSON/tag-value support
- Manual uploads or automated imports from CI
- Component and OSV vulnerability matches
Status of the services you use
Track outages and recoveries with your team.
Monitor public status sources for your selected service providers. Configure team notifications for status changes, outages and recoveries.
- Microsoft, Apple, Cloudflare and other supported providers
- Track status changes and incident history
- Outage and recovery emails for the relevant team
Intelligence and research
Explore intelligence and track changes.
Choose a topic group to explore the tools and application screens.
Malicious Links
Review suspicious indicators with their sources.
Investigate malicious and suspicious URLs, domains and IPs with source, status and date information. Narrow your review list using filters and summary charts.
- Filter by source and indicator type
- Active, inactive and removed records
- Review addresses in a safe display format
IOC and company scope
Connect intelligence to your company's research.
Review shared threat indicators and company-specific IOCs in one workspace. Define your company sector, monitored domains and networks, and indicator validity periods.
- Company-specific indicators and review notes
- Domain, IP, network and file hash indicators
- Validity periods and archive decisions
Brand and domain monitoring
Investigate domains resembling your brand.
Review brand similarity and character impersonation indicators in active threat feeds. Define your official domain, and add reasons and assessments to similar-domain findings.
- Brand and official domain definitions
- Character impersonation and similarity indicators
- Analyst assessments and finding statuses
MITRE ATT&CK
Link indicators to attack techniques.
Map IOCs and inventory findings to MITRE ATT&CK techniques. Record analyst assessments of your company's logging, detection rules and test coverage.
- Technique, tactic and platform filters
- Suggested or verified mappings
- Log source and test evidence notes
Actors and campaigns
Explore campaign techniques and relationships.
Review MITRE ATT&CK actor and campaign profiles alongside techniques, malware and source versions. Sector information is shown when available at the source.
- Actor and campaign search
- Technique, tool and malware relationships
- Source versions and withdrawal status
SBOM comparison
See component and risk changes in a new release.
Compare two SBOM uploads for the same application. Assess added, removed and changed components alongside current CVE and OSV matches.
- Select two uploads to compare
- Retain multiple versions of the same component
- New and removed security matches
Risk changes
Notice when an existing finding's significance changes.
Review EPSS increases, additions to KEV and affected-version changes with their old and new values. Assess notifications in the panel and mark them reviewed.
- Old and new EPSS values
- Additions to KEV and version scope changes
- Review status and change time
Domain and certificate monitoring
Track changes to your domain.
Monitor DNS, HTTPS certificates and new subdomains observed in certificate transparency records for domains verified with a TXT record. Review unexpected changes.
- Domain ownership verification through DNS TXT
- DNS and certificate changes
- New subdomains and certificate expiry alerts
Source history
See the evidence behind your assessment.
Review sources and change history for CVEs, IOCs, vendor advisories and actor profiles. Source withdrawals are visible; private IOC history stays within the company scope.
- Sources and observation times
- Compare old and new values
- Source withdrawal and version details
Threat hunting
Record your research and reuse it.
Collect hypotheses, required logs, queries and results in a research record. Create new work from previous research and review edit history.
- Hypotheses, log requirements and query records
- Results and evidence links
- Reuse and edit history
KVKK data breaches
Track data breach announcements in one place.
Review public KVKK data breach announcements by date range. Access the latest announcements from Overview, and follow new announcements using notification preferences.
- Announcement lists and date filters
- Source announcements and incident details
- Optional email notifications
OpenVEX and remediation verification
Document finding impact and remediation.
Add product impact assessments to findings using OpenVEX documents. Record remediation evidence and versions; verify remediation or reopen the finding if verification fails.
- OpenVEX impact assessments
- Remediation evidence and change records
- Verification and reopening when needed
Report history and teams
Track work with your team.
Assign assets to responsible teams and configure team notifications. Track management report preparation in the history and download completed reports again.
- Team and asset responsibility
- Notification severity preferences
- Report preparation status and download history
Company-scoped access
Keep research and records within your company.
Inventory, research and private indicators are scoped to a company. Viewing and editing follow the user's role; sign-in includes email verification.
- Company-scoped inventory and research
- Role-based viewing and editing
- E-posta ile giriş doğrulaması
Screens contain sample data. Organisations and announcements in the KVKK image are illustrative.
Example workflow
Turn a new vulnerability into work you can track.
Imagine a firewall in your inventory. When a new record for that product arrives, the process follows these steps.
- 01
Record imported
A newly published vulnerability is imported during a scheduled source check.
- 02
Matched to inventory
Product and version details are compared. KEV, EPSS and asset criticality are assessed.
- 03
Team notified
The relevant team receives findings according to its preferences; an assignee and due date are set.
- 04
Remediation recorded
An update or other action is applied; remediation evidence and the new version are recorded.
Email notifications
Relevant information reaches the responsible team.
Explore examples of vulnerability, inventory, daily summary and service notifications.
General CVE notification
Critical severity
A new critical CVE record, its scores and verification steps.
Inventory finding
High severity
Affected asset, high severity, KEV details and recommended actions.
General CVE notification
Medium severity
Details of a medium-severity vulnerability and information to check the product.
General CVE notification
Low severity
A low-severity CVE record and suggested verification steps.
Daily email summary
Daily report
Daily summary of severity distribution, priority findings and service statuses.
When status changes
Outage / performance issue
Information to check the provider issue and its impact.
Recovery notification
Service recovered
Service recovery details and workflows to verify within your organisation.
Integrations
Works with the tools your team uses.
Send notifications through configured connections and create work items for findings.
Microsoft Teams
Notifications in your team's workspace.
Webhook
Send events to your own systems.
Jira
Create work items for findings.
GitHub
Track findings through work items.
Current data from established sources.
Sources are checked regularly. New records enter the matching and notification process after import.
MITRE ATT&CK
Attack techniques, actors and campaign relationships
Threat feeds
Malicious and suspicious indicators from active sources
Certificate transparency
crt.sh for subdomain observations of verified domains
NVD
CVE records, descriptions and product/version information
CISA KEV
Vulnerabilities known to be actively exploited
EPSS
Scores estimating vulnerability exploitation probability
Vendor advisories
Security advisories from supported vendors
OSV
Vulnerability records for software packages and dependencies
KVKK
Public data breach announcements
Management reports
Turn your risk view into a report you can share.
PDF reports summarise severity distribution, KEV information, asset counts and priority open findings.
- Open findings and risk distribution
- Inventory and KEV matches
- Priority finding summary
Frequently asked questions
Before you begin.
Short answers about matching, notifications and data sources.
All questions and the user guideWhich vulnerabilities does Derbentçi associate with my organisation?
It compares vendor, product and version information with your inventory, separating exact or high-confidence matches from records requiring review. Records with missing version information need further assessment.
What do Malicious Links records show?
Malicious and suspicious indicators from threat feeds, with their sources and statuses. Suspicious records require analyst review; a listed record does not establish that your company experienced an attack.
When are domain verification and certificate checks performed?
Add the displayed TXT record to DNS for the domain. The worker checks hourly and processes up to 20 domains per run. DNS propagation and source availability can affect verification time.
Can I select notification severity levels?
Choose critical, high, medium and low levels for team notifications. Service and data breach notifications are configured separately.
Which SBOM formats are supported?
CycloneDX JSON and XML, and SPDX JSON and tag-value formats are supported. Upload files in the panel or send them from CI using a company-scoped import key.
What information is service status based on?
Public status sources from supported providers. A separately configured Microsoft Graph connection supports company-specific Microsoft 365 status. Provider status does not guarantee that every internal workflow is working.
Contact and access
Explore Derbentçi for your organisation.
Request a demonstration to discuss your organisation's needs.