Service Fingerprinting Scan assesses security posture by signature matching of CVEs in installed packages and services, detecting common misconfigurations and scanning for exposed secrets.
What is checked
- Known CVEs mapped to installed package and service versions.
- Common misconfigurations such as weak TLS ciphers, overly permissive storage, and default credentials.
- Secrets in code or configuration (API keys, private keys, tokens).
Detection process
- Fingerprinting: Collect package and service version data from hosts and images.
- Vulnerability mapping: Match package/version to vulnerability databases and advisories.
- Misconfiguration checks: Run configuration audits and TLS/certificate checks.
- Secrets scanning: Run targeted detectors and regex checks on code and configuration artifacts.
- Each finding includes a clear description and evidence like file, package details or command output would be provided.
- Actionable remediation steps like upgrades, configuration change or credential rotation.
- Service Fingerprinting findings are fed into CyfroAI Engine for deep assessments with the other scans to enhance data correlation.