May sees an exciting new addition to Hexiosec ASM with scan metrics. We’ve introduced some key statistics about your scan, allowing you to track your security position over time. We also made some other improvements to allow you to add an executive summary to the web presence report and search your secondary assets. We’ve also updated one of our TLS certificate checks to align with updated industry standards.
We’ve added some key metrics to scans, to allow you to track your key statistics over time, and compare different scans. Instead of using a single, opaque score to rate organisations’ security, we provide a number of meaningful metrics that allows you to assess, compare and track your attack surface’s health.
The metrics we’ve added are:
Note Days of risk exposure and Days to resolve risks are only available on continuous scans.
In addition to these metrics being added to the scan overview, you can also review the metrics over time to understand your progress. You can view how each of the metrics has changed over your chosen time period, and review the minimum, maximum and average values for each, and export the data.
In February, we introduced the web presence report. It allows you to visualise everything you have exposed online, and shows you what a user would see if they browsed to every URL identified on your attack surface.
You can now add an executive summary to the report, to add any additional commentary or context to the report before sharing it with your Board or other stakeholders.
The Secondary page, now has a search option, allowing you to more easily search through the domains and IPs that are related but not linked to your scan.
As of 15th March 2026, the industry standard for web browsers is to enforce a validity period of 200 days for TLS certificates. If certificates fail the validity period check, it means that someone browsing to a website using this certificate would be presented with a security warning.
We have added a check for this, meaning a medium risk will be raised if you have a certificate with a longer validity period identified.
We’ve got some exciting features coming over the next couple of months. Please get in touch if there are any features you would like to see us add to our roadmap.
Scan your domain to get an instant, no-registration snapshot of your internet-facing assets.
Scan my domain
Send files, collect with forms, and collaborate in spaces - all with zero-knowledge encryption and UK hosting.
Try free
