Battle-tested penetration testing utilities, automation scripts and technical documentation — built by the team that maps Africa’s attack surfaces every day.
Commercial licences include encrypted delivery, twelve months of updates and a named support contact. Purchase routes directly to our secure checkout.
Continuous attack-surface enumeration engine with subdomain discovery, port fingerprinting and CVE correlation in a single CLI.
Headless vulnerability scanner exposed as a REST API — drop authenticated scans straight into your CI/CD or SOC automation.
Authorised phishing-simulation framework with landing-page templates, campaign tracking and staff-awareness scoring.
412 production-tested detection rules mapped to MITRE ATT&CK, packaged for Splunk, Elastic and Wazuh.
Encoder, obfuscator and payload staging console for authorised red-team engagements and detection-engineering validation.
Map scan findings to Central Bank, ISO 27001 and Data Protection requirements, then export a board-ready evidence pack.
Community resources published under permissive licences. Click download and the file is fetched straight from the source — no checkout, no account, no telemetry.
Terminal utility that pulls the NVD feed, filters by vendor and ecosystem, and prints a prioritised patch queue for your estate.
A twelve-page PDF of the scan flags, timing templates and evasion switches our assessors actually reach for during engagements.
Idempotent shell scripts that apply CIS-aligned baselines to Ubuntu, Debian and RHEL hosts, with a dry-run mode and rollback manifest.
Machine-readable JSON feed of weaponised CVEs, active exploitation status and vendor advisory links — refreshed every fifteen minutes.
A printable readiness checklist mapping Central Bank of Kenya and Data Protection Act obligations to concrete technical controls.
Subscribe in any feed reader to receive VUNVAULT’s zero-day bulletin the moment a critical vulnerability becomes weaponised in the wild.
Free resources are provided as-is for authorised testing only. Never scan systems you do not own or have written permission to assess.
This is the same shell our operators use. Browse the catalogue, preview a scan or pull a free resource — right here in the browser.
Simulated environment for demonstration. Purchases route to
payment.html; free downloads are fetched directly from source.
Internal scanners, CI security gates, SIEM content or a private red-team arsenal. Tell us the workflow and we will scope the build.