Rethink pentesting: continuous, clear, and controlled

Patrowl covers the full spectrum of vulnerabilities found on your external attack surface, across three main categories:

1. Known vulnerabilities (CVE, CNNVD, etc.)

Patrowl continuously monitors public vulnerability databases (such as CVE) and alerts you as soon as a known vulnerability affects your exposed assets.
As a recognized CERT, we ensure fast and accurate detection.

2. Non-referenced or custom vulnerabilities (non-CVE)

These are the most frequent — and often the most critical.
They result from human error (misconfigurations, default access, injections, weak passwords, etc.) and are rarely published in official databases, yet widely exploited by attackers.
Patrowl identifies them using its advanced behavioral analysis engine.

3. Zero-day vulnerabilities

In some cases, our automation and expert capabilities allow us to detect zero-day vulnerabilities (not yet publicly disclosed) affecting specific products or plugins.
When this happens, Patrowl handles coordinated disclosure with the vendor and provides you with temporary mitigation measures until an official patch is released.

Patrowl can monitor and test a wide range of external assets, including:

• IP addresses and IP subnets

• Autonomous systems (AS numbers)

• Domain names and DNS zones (second-level domains, subdomains)

• DNS records (MX, SPF, DMARC, NS, etc.)

• FQDNs, URLs, and specific web pages

• Public cloud accounts (AWS, Azure, GCP, etc.)

• Corporate email addresses

• Custom keywords (company name, brand, product, sensitive terms, etc.)

Patrowl goes far beyond a basic vulnerability scanner.
While most scanners only detect CVEs on a static perimeter and require deep technical expertise to interpret, Patrowl delivers continuous, comprehensive, and intelligent monitoring — covering:

• Known vulnerabilities (CVE, OWASP, etc.)

• Misconfigurations

• Data leaks

• Real-time, dynamic mapping of your internet exposure

Our key advantage?
Every vulnerability detected is validated by our in-house pentesters to confirm it is actually exploitable.

The result:

• Zero false positives

• Only relevant, business-impacting alerts

• Clear, actionable remediation guidance — even for non-technical teams

Every vulnerability reported by Patrowl goes through a rigorous multi-step qualification process:

1. Automated pre-qualification based on multiple criteria:

   • Technical severity (CVSS v3 score)

   • Business criticality of the asset

   • Exposure level of the asset

   • Source and context of the vulnerability

2. Human validation:
   Each vulnerability is then reviewed and confirmed by an offensive security expert to ensure it is truly exploitable.

This hybrid approach guarantees zero false positives and ensures that every alert is relevant, actionable, and prioritized.

A penetration test simulates real-world attacks to identify security vulnerabilities. Unlike automated scanners, it is conducted by cybersecurity experts and involves in-depth analysis.

However, traditional pentests come with several key limitations:

1. Limited frequency

Usually performed once or twice a year, they can’t keep up with the fast pace of evolving threats. Gaps remain between tests, leaving systems exposed.

2. High cost

Because they rely on expert manual work, pentests are expensive — making it hard for many organizations to run them regularly.

3. Lack of follow-up

Once the final report is delivered, there is often no ongoing monitoring or validation to ensure that vulnerabilities are properly remediated.