Know what you own and what is exposed
Ciyora Discover keeps one inventory of endpoints, servers, domains, certificates and cloud resources. It combines what the endpoint agent reports with network scans and cloud accounts, and ranks vulnerabilities by how likely they are to be exploited, not only by severity.


What Ciyora Discover does
One asset, every source
Each asset shows where Ciyora learned about it and what each source contributes, so gaps in coverage are visible. Tabs cover installed software, vulnerabilities, network interfaces and open ports, and the activity related to the asset.
- Data sources per asset: the endpoint agent, network scans and cloud connectors
- Software inventory with versions and the CVEs that affect them
- Riskiest assets first, with owner and agent status
Vulnerabilities ranked by real-world risk
Findings combine CVSS with EPSS exploit-likelihood scores and a flag for entries on the CISA Known Exploited Vulnerabilities list. Filters for severity, status, exploitation and CVSS keep the work queue focused on what attackers use.
External attack surface
Discover finds internet-facing subdomains from certificate-transparency logs, probes ports and web services, and monitors certificates, so new exposure is noticed before it is exploited.
Scans on your schedule
Run a scan against a registered target with a confirmation, follow its steps and failures, and cancel it if needed. The scan list refreshes on its own while scans run.
Capabilities
- Asset inventory
- Endpoints, servers, domains, certificates and cloud resources with risk, owner, agent and data sources.
- Vulnerabilities
- CVSS with severity bands, EPSS, CISA KEV, status filters and affected assets.
- Attack surface
- Subdomain discovery from certificate-transparency logs, port and HTTP probing, certificate monitoring.
- Scans
- Network scans against registered targets with steps, failures, open ports and cancellation.
- Service catalogue
- SaaS applications and cloud services with risk, sensitivity, cost, licences in use, who has access, and callouts for unsanctioned and AI tools.
How Ciyora Discover works with the rest of the platform
Every module shares one tenant, one identity model, one audit chain and one console, so a finding in one place is context everywhere else.
Ciyora Discover can be bought on its own or as part of a bundle. See Ciyora Discover pricing.
See Ciyora Discover in a demo
A demo walks through the module on a sample tenant and covers how it would connect to your identity provider, cloud accounts and sites.