Passive checks only. No exploitation, no port scan. Run one on your domain
ORBby Kaynos Request a pilot
Continuous resilience

Trust nothing.
Verify everything.

Air-gapped · zero trust · evidence you can re-run

A free external posture scan of a domain you are authorized to assess. NEST is Admin and Agent, with no virtual machine. ORB Local graphs Wazuh, Suricata and Defender on this host.

Run free scan Request access
  • TLS
  • HSTS
  • CSP
  • DMARC
  • DNSSEC
  • CORS
Public signals only · UTCLink secure
Scan, then fix, then verifyOnline
https://
01 HTTPS and headers02 Email, DNS and IPv603 Exposure and secrets04 Forgotten hosts05 OWASP and MITRE06 Evidence transcripts
Passive, low-impact checks. No exploitation. No port scanning.
What the scan is for

A check you can re-run.

ORB reads public signals on a domain you are authorized to assess. It blocks private targets. It does not exploit anything, and it does not scan ports.

01

TRANSPORT AND HEADERS

TLS, HSTS, CSP, cookies and what the public response actually sends.

02

EMAIL AND DNS

DMARC, SPF, DNSSEC, CAA and whether mail and name servers line up.

03

EXPOSURE

Forgotten hosts, public files and secrets in the homepage and a few first-party scripts.

04

RANKED NEXT STEPS

Open findings carry a CVSS 3.1 base vector. The grade follows the worst open score. A later scan of the same domain in this browser shows what opened and what closed.

Nest · one system · no virtual machine

Install Admin.
Install Agents.
They connect.

One roost: NEST-Admin.exe on the SOC host, NEST-Agent.exe on each endpoint, one key. Command is Admin. Sentinel is Agent. Stack health only — no remote shell.

01ADMINSOC HOST
02KEYONE SECRET
03AGENTEACH ENDPOINT
04CHECK-INSTACK HEALTH
05VIEWSCOMMAND / SENTINEL
SOFTWARE REQUESTSubmit a request. Kaynos replies with the designated pack and deployment procedure.Request access
ONE ROOST / TWO VIEWS
VIEW / 01

COMMAND

NEST ADMIN CONSOLE

Fleet, enrollment key and graphs when Admin is up on this machine. Demonstration UI when it is not. No endpoint commands.

  • LIVE AT :47900
  • HONEST WHEN DISCONNECTED
VIEW / 02

SENTINEL

NEST AGENT VIEW

Local status for NEST-Agent.exe on this host. Same roost as Command — not a second product.

  • LIVE WHEN AGENT RUNS
  • NO REMOTE SHELL
ORB Local · no virtual machine

Watch the host.
Keys stay on disk.

An optional on-host observer (orb-local). It identifies Defender, Wazuh, Suricata and related products and graphs them. Issued by Kaynos after correspondence. No public installer. No VM.

ONE LOCAL OBSERVER / WHAT IT DOES
VIEW / 01

IDENTIFY

PRODUCTS ON THIS HOST

Reads the local security stack. Shows whether Defender, Wazuh, Suricata and related controls are present and working.

  • NO HYPERVISOR
  • LOCALHOST ONLY
VIEW / 02

KEYS

OPTIONAL, YOUR STACK

Optional Wazuh, Suricata and Elastic keys stay on that disk. Nothing is uploaded. Command can read this observer when Admin is down.

  • KEYS STAY ON DISK
  • NO UPLOAD
The complete security chain

From exposure
to verified response.

ORB is the public scan, and it is the part that is ready to run today. NEST is the admin and agent view of stack health. ORB Local names the products on the host. None of them run an exploit.

01

PUBLIC POSTURE

The free scan reads transport, headers, email and DNS on a domain you are allowed to assess.

02

ENDPOINT STATUS

Sentinel shows whether the agent on this host is up. There is no remote shell.

03

STACK HEALTH

Identify installed controls and whether they are present. NEST does not run attack simulations.

04

A NEXT ACTION

Each open finding includes a concrete step. Run the scan again to see what closed.

05

KEYS ON THE HOST

ORB Local and NEST keep optional keys on that disk. Those views do not upload them.

06

WAZUH + SURICATA

ORB Local identifies them when they are installed. It does not replace them.

Controlled by design

Safe enough to try.
Serious enough to act on.

01

AUTHORIZE

The user confirms authority before a scan begins.

02

VALIDATE

Private, local and malformed targets are rejected.

03

OBSERVE

Public HTTP, DNS and email checks only. No payloads are sent.

04

PRIORITIZE

Open findings are scored with CVSS 3.1 base vectors. Asset grade follows the worst open score.

05

REMEDIATE

Every weakness includes a concrete next action.

Nest · Command and Sentinel

One roost.
Two views.

Open Command after NEST Admin. Open Sentinel where the Agent runs. Without NEST or ORB Local they stay labelled demonstration UIs.

Kaynos Private Limited

Deploy inside.
Prove from within.

Request a controlled ORB pilot for an isolated Windows or Linux group, with Wazuh or Suricata checked under a documented scope of work.

Start with the free scan Kaynos consultancy