Skip to main content
Ciyora Discover

Know what you own and what is exposed

Ciyora Discover keeps one inventory of endpoints, servers, domains, certificates and cloud resources. It combines what the endpoint agent reports with network scans and cloud accounts, and ranks vulnerabilities by how likely they are to be exploited, not only by severity.

An asset page in Ciyora Discover for a production server: type, hostname, IP address, operating system, owner and first and last seen, with data sources showing the Ciyora agent and network scans as active.An asset page in Ciyora Discover for a production server: type, hostname, IP address, operating system, owner and first and last seen, with data sources showing the Ciyora agent and network scans as active.

What Ciyora Discover does

One asset, every source

Each asset shows where Ciyora learned about it and what each source contributes, so gaps in coverage are visible. Tabs cover installed software, vulnerabilities, network interfaces and open ports, and the activity related to the asset.

  • Data sources per asset: the endpoint agent, network scans and cloud connectors
  • Software inventory with versions and the CVEs that affect them
  • Riskiest assets first, with owner and agent status

Vulnerabilities ranked by real-world risk

Findings combine CVSS with EPSS exploit-likelihood scores and a flag for entries on the CISA Known Exploited Vulnerabilities list. Filters for severity, status, exploitation and CVSS keep the work queue focused on what attackers use.

External attack surface

Discover finds internet-facing subdomains from certificate-transparency logs, probes ports and web services, and monitors certificates, so new exposure is noticed before it is exploited.

Scans on your schedule

Run a scan against a registered target with a confirmation, follow its steps and failures, and cancel it if needed. The scan list refreshes on its own while scans run.

Ciyora Discover

Capabilities

Asset inventory
Endpoints, servers, domains, certificates and cloud resources with risk, owner, agent and data sources.
Vulnerabilities
CVSS with severity bands, EPSS, CISA KEV, status filters and affected assets.
Attack surface
Subdomain discovery from certificate-transparency logs, port and HTTP probing, certificate monitoring.
Scans
Network scans against registered targets with steps, failures, open ports and cancellation.
Service catalogue
SaaS applications and cloud services with risk, sensitivity, cost, licences in use, who has access, and callouts for unsanctioned and AI tools.

See Ciyora Discover in a demo

A demo walks through the module on a sample tenant and covers how it would connect to your identity provider, cloud accounts and sites.