VISORA

Oxygen Builds Custom VISORA EASM Scanner After Commercial Tools Fail to Meet Requirements

Russian cloud integrator Oxygen Data Centers & Clouds developed its own External Attack Surface Management platform called VISORA after testing multiple commercial scanners on the Russian market and finding none sufficiently deep or low-noise. The 1.5-year project produced a microservices-based system with dedicated scanning nodes, FastAPI backend, Apache Kafka messaging, and PostgreSQL storage that follows three core principles: reproducible results, no exploitation of vulnerabilities, and offline-first vulnerability databases. VISORA discovers domains, subdomains, IP addresses, open ports, web applications, cloud resources and TLS certificates without relying on the customer’s internal CMDB, then verifies findings against NVD, FSTEC BDU and distribution feeds for Debian, Ubuntu and Red Hat. A dedicated verification module reduces false positives by checking package status in specific distributions and issuing one of four verdicts, while active web scanning covers OWASP Top 10 classes plus GraphQL, CSRF and secret leaks. The interface built with React and TanStack Query presents assets, history and prioritized risks in a clean, linkable, filterable layout that preserves user context. Future plans include authenticated scanning, real-world exploit prioritization and AI-assisted verification.