Nothing to show yet

Add your first domain or IP range. We start a passive scan right away and fill this view within minutes.

ERROR 503 · index-query timed out

This view could not be loaded

The query service did not answer in time. Your data is safe. Try again, or check the status page if this keeps happening.

No permission

Your role can't open this area. Ask an admin of your organisation for access.

                  Sessions
                  
                    ⌕
                    
                    {{ g.label }}
{{ g.emptyNote }}

                            {{ c.title }}
                            ↗
                            {{ c.kind }}
                          
                    {{ agEmptyText }}

                >_ athorion · agent{{ agCurTitle }}
                {{ pgCreditLbl }}{{ pgCredit }}
              

athorion agent

{{ ln.t }}
{{ ln.fext }}
{{ ln.fname }}
{{ ln.fmeta }}
{{ pgLoadTxt }}

SHARE CHAT {{ agShTitle }}

Public link Anyone with the link can read the chat. No sign-in needed.

EXPIRES

LINK

Link copied to clipboard

The chat is shared as it is at the moment of sharing. Later messages stay private.

{{ routePath }}

Next steps · {{ onbPlanName }}

{{ onbDone }}/{{ onbTotal }} steps done

{{ k.label }}

Security rating

{{ gauge.band }}

30 days{{ gauge.delta }}

Risk by vector{{ donutTotal }} findings

No findings yet. Verify a domain on the Scans page and run your first scan.

Latest alerts

No alerts yet.

Top exposed assets

{{ routePath }}

Internet index

›

{{ sx.k }}{{ sx.v }}

✦ Manta turns your question into a search - press Enter.

{{ fa.k }}:{{ fa.v }}

✦ {{ mantaTag }}

Your question: “{{ mantaQ }}”

Explore

On-demand check · {{ odHost }}

{{ odPorts }}

{{ odCounts }}

Facets

Saved searches

No saved searches yet. Run a query and click ☆ Save search - then turn on an alert to hear about new matches.

No hosts match this query

Try a port, product, CVE or a whole device class - or type a domain/IP for a live check. e.g. category:ics · product:nginx has_vuln:true · cve:CVE-2021-44228

{{ h.cc }}{{ h.org }}{{ h.asn }}

Last seen {{ h.seenL }}

{{ h.banner }}

{{ mapNote }}

{{ routePath }}

Org {{ host.org }}ASN {{ host.asn }}Geo {{ host.geo }}Last seen {{ host.seenL }}

Ports & services{{ host.nPorts }}

{{ p.banner }}

Vulnerabilities

History

No observations recorded yet.

TLS / certificate{{ tls.status }}

▲ {{ w }}

DNS · WHOIS · attribution

Linked domains

{{ routePath }}

Attribution graph

{{ routePath }}

Monitored assets

Exposure Monitor

Everything you expose to the internet - and what changed

Passive watch starts immediately, no verification needed: our daily non-intrusive crawl of your public IPs and ranges, certificate-transparency logs, certificate expiry and DNS / e-mail protection. Verified domains additionally get active scans of the 1,000 most common ports, version-based CVEs and the security rating.

{{ k.k }}

Exposed services

No assets watched yet. Add a public IP, range or domain - first results arrive with the next daily sweep (usually within minutes for small scopes).

{{ a.asset }}{{ a.mode }}

Changes · last 30 days {{ exObs }}

No changes detected yet. Every new or closed port and every new subdomain shows up here - and triggers your alert rules.

{{ e.sub }}

{{ cd.k }}

{{ cd.v }}

{{ routePath }}

Threat intelligence

We correlate your own assets against public threat feeds - botnet C2 (abuse.ch Feodo), malware hosts (URLhaus), the Tor exit list and known-bad / scanning IPs (CINS Army, Emerging Threats) - plus the CVEs on your surface that CISA lists as actively exploited. A direct hit means one of your assets is itself on a feed; adjacent means it shares a /24 with a flagged IP.

{{ k.k }}

Feed freshness

{{ f.source }}{{ f.status }}

{{ f.count }} IOCs{{ f.when }}

Cyber Intelligence

The numbers above are real - the details are locked

On Free you see how many of your assets are on threat feeds. Cyber Intelligence shows which ones, on which feed, since when, and the actively exploited CVEs on your surface.

Matches on your assets

No threat-feed matches on your assets. We re-check as your attack surface and the feeds update.

{{ m.sev }}{{ m.asset }}{{ m.match }}

{{ m.cat }} · {{ m.detail }}

Actively exploited (KEV)

No actively-exploited CVEs detected on your surface. Good - this is the list attackers work from.

{{ e.cve }}{{ e.epss }}

{{ e.assets }}

{{ routePath }}

Third-party risk

Add a supplier or vendor by domain. We measure their external attack surface passively - the same non-intrusive check we run across the internet - and grade it 0-100 with the same rating engine as your own assets. Scores refresh automatically.

Cyber Intelligence

Know when a supplier becomes your risk

Add your IT provider, your host, your payment and logistics partners. athorion rates their external attack surface 0-100 with the same engine as your own and tells you when one of them slips. Suppliers you added in the trial stay in the list.

Supplier domain

Name (optional)

{{ k.k }}

No suppliers yet. Add a vendor domain above to start tracking their external posture.

{{ x.name }}{{ x.status }}

{{ x.domain }}

{{ x.ports }} open ports{{ x.cves }} CVEs{{ x.rated }}

{{ routePath }}

Billing

Current plan

Status

{{ biStatus }}

Renews

{{ biRenews }}

Trial ends

{{ biTrialEnds }}

Model budget

{{ biBudgetTotal }}available

{{ biBudgetIncluded }} included (of {{ biBudgetAllowance }}/mo) · {{ biBudgetTopup }} topped up
resets {{ biBudgetResets }}

{{ biBudgetUsed }} used this month · {{ biBudgetRate }}

Add credit

Your plan includes {{ biBudgetAllowance }} of model usage each month. Top up anytime - purchased credit never expires. Billed via Stripe, EU VAT applies.

Automations

Low-balance email alert

We email you once when your credit drops below the threshold (and again only after it recovers).

Auto-recharge

Top up automatically when credit runs low. Bounded by a monthly cap, a cooldown and a failure limit; EU VAT applies.

When below add · max/ month

{{ biArSpent }} auto-recharged this month (cap {{ biArCapLbl }}).

No charge before day 15 · cancel anytime

Billing starts after the trial · cancel monthly

Need group hierarchies, SSO or third-party monitoring? Talk to sales about Ecosystem → · Payments, invoices and EU VAT are handled by Stripe. Upgrade, downgrade or cancel anytime from the portal.

{{ routePath }}

Alerts

No alert rules yet.

{{ ru.cond }}

→ {{ ru.ch }}

Channels are configured per alert rule. Every destination your rules deliver to is listed here; Send test delivers a test alert through the rule that uses it.

Email{{ chEmailN }}

No email destinations yet.

{{ ch.val }}

Webhook{{ chHookN }}

No webhook destinations yet.

{{ ch.val }}

Slack{{ chSlackN }}

No slack destinations yet.

{{ ch.val }}

{{ routePath }}

Your trust seal

Earn the athorion Cybersecurity Verified seal: verify your domain, let us scan it, fix what we find. Essential from 70 · Silver from 80 · Platinum from 90 points.

{{ st.state }}

We only scan what you prove you own. Add a DNS TXT record (or a file on your website) - it takes two minutes and covers all subdomains.

✓ Verified: {{ jVerifiedList }}

{{ o.value }}pending

Guided verification

We find your DNS provider and guide you step by step - with many providers in one click.

Or add the record by hand:

DNS TXT record - name

value

Or serve the value as a file at {{ o.fileUrl }}

Recently used

Your recently used domains and IPs - from your signup, checks, pen-tests and monitoring. Click one to insert it.

Non-intrusive: open services, TLS, web hardening and known vulnerabilities from disclosed versions. We add the domain to weekly monitoring.

{{ d.value }}

{{ j.target }}{{ j.status }} · {{ j.when }}

{{ jScore }}/ 100 · {{ jScoreNote }}

708090

{{ f.ref }}

After a fix, press Re-check: the host is scanned again and the rating updates about a minute after the scan. Full details and evidence are on the Vulnerabilities and Reports pages.

Embed code

{{ jSumTag }}

{{ tr.label }} · {{ tr.at }}

{{ routePath }}

Pen-Test AI · TIER 3

Athorion's local cyber-security LLM runs a complete non-intrusive assessment and checks whether known exploits could apply.

⚠

Active exploit confirmation runs only on domains you have verified ownership of. Any other target gets deep analysis and exploit-applicability assessment only. You are responsible for using this against systems you are authorised to test.

Live attack surface

Pen-tests

No pen-tests yet. Click "+ New pen-test" to run the first one.

Live · {{ ptDetailTarget }}{{ ptDetailMode }}EXAMPLE{{ ptDetailStatus }}

This is an example so you can see what a report looks like. Run your own pen-test - or delete this example.

Enter a target and start a pen-test to watch the analyst work here.

{{ ph.mark }}{{ ph.label }}

↻ {{ ptPrevL }}{{ ptPrevDelta }}

raw output

{{ e.raw }}

{{ ptRisk }}/ 10 risk · {{ ptFindingN }} findings✓ {{ ptConfLabel }}

↻ {{ ptDiffText }}

Continuous monitoring

Keep an eye on these findings

↻Weekly re-test of {{ apTarget }}

!Instant alert on new critical findings and newly opened ports

▤Monthly report, including non-critical findings

All set - athorion keeps watching

✓Monitored weekly · alerts on · monthly report

Attack path

{{ s.from }} → {{ s.to }}

{{ f.prio }}{{ f.sev }}{{ f.conf }}NEW{{ f.title }}{{ f.cve }}KEVEPSS {{ f.epss }}

{{ f.mitre }}

Exploitability: {{ f.exploit }}

Attack path: {{ f.apath }}

Fix: {{ f.fix }}

Free plan

More findings are locked

Free shows the most important finding of each severity. Cyber Intelligence shows every finding with the attack path, the exploitability and the fix.

KEV

{{ routePath }}

Security rating

{{ gauge.band }}

{{ tl.label }} · {{ tl.at }}

Rating history Your rating · 0-100

No rating history yet - verify a domain and run your first scan to get a rating.

{{ ax }}

NOT YET
VERIFIED

Athorion Verified

Embed on your website

Verify page →

Risk vectorsscore (100 = best) · findings

No risk vector scores yet - verify a domain and run your first scan to get a rating.

What lowers your score

{{ lw.a }}

No critical or high findings. Nothing is pulling your score down right now.

{{ routePath }}

Vulnerabilities

EPSS ≥ {{ vEpssL }}

CVEs are matched from observed product versions. A version-based match may be a false positive if the vendor back-ported a fix without changing the version string.

{{ routePath }}

Authorized scans

TIER 2Active scans go deeper than the passive index. They run only against scope whose ownership you have verified, only inside an approved authorization, and only with non-intrusive checks (port, TLS and HTTP observation).

Ownership{{ ownCount }}

No ownership proofs yet. Active scans only run against scope you have proven you control. Add your domain above to get DNS or file instructions; IP ranges are reviewed by an Athorion operator.

Last check · {{ o.err }}

Checking your DNS provider…

Or add the record by hand:

Type{{ o.dnsType }}

Name{{ o.dnsName }}

Value{{ o.dnsValue }}

Add this TXT record at your DNS provider, then click Check now. DNS changes can take a few minutes to propagate.

URL{{ o.httpUrl }}

Content{{ o.httpContent }}

Serve exactly this text (plain text) at the URL, then click Check now.

Scope authorizations

{{ routePath }}

Reports

Scheduled

No scheduled reports yet. Scheduled reports are e-mailed as PDF to the recipients you add.

{{ sd.when }}

→ {{ sd.to }}

{{ sd.next }} · {{ sd.last }}

{{ routePath }}

API & tokens

API docs →

InfoThis is NOT the LLM key.

This API drives the same cybersecurity scanner as the console: scans, findings and PDF reports from your own code or CI.

Looking for the API keys for the LLM? Go to the LLM API →

The Athorion API drives the same cybersecurity scanner as the console. With a token you start a non-intrusive scan of any public domain or IP, poll it for the discovered ports, services, TLS and version-based CVEs, and pull a finished PDF report - straight from your own code or CI.

POST /v1/scans → GET /v1/scans/{id} (status · findings · counts) → GET /v1/scans/{id}/report.pdf

Authenticate with Authorization: Bearer <token>. Full docs, webhooks and the Cybersecurity LLM are on the API docs page.

{{ u.k }}

{{ u.v }}/ {{ u.max }}

Quick start

{{ snippet }}

{{ routePath }}

Cybersecurity LLM API

Call our grounded security LLMs from your own tools. You pick the model per request.

Model budgetTop up credit →

{{ biBudgetTotal }}available

{{ biBudgetUsed }} used{{ biBudgetCap }}

Included / month

Topped up

Resets on

Price

Nautilusmodel: nautilus

Deeper reasoning for exploit paths, correlation and complex attack-surface questions.

Use via API key ↓

Mantamodel: manta

Fast grounded analysis for everyday questions, live checks and triage.

Open in web agent →

API keys

A key only reaches the LLM endpoints (/v1/ask, /v1/models). Send it as a bearer token; usage counts against your model budget.

API docs →

No keys yet

Your first answer in two minutes

Create a key and call the model from your terminal, script or SIEM.

With your first key you confirm our usage rules once.

ExamplecURL

{{ llmFirstSnippet }}

MCP serverCyber Intelligence · Ecosystem

Drive the whole platform from your AI agent (Claude Desktop, IDE agents) over the Model Context Protocol - index search, on-demand scans, exposure checks and the Cybersecurity LLM, all as tools. Connect to mcp.athorion.io or run npx @athorion/mcp.

The MCP is available on the Cyber Intelligence and Ecosystem plans. Upgrade to connect your AI agent to the platform.

Use your keyFull API docs →

Send the key as a bearer token. You just ask a question - we run a live, non-intrusive check of any domain or IP you name and the model answers from that evidence (it never invents findings). Pick model: manta (fast) or nautilus (deep) per request.

{{ llmSnippet }}

{{ llmPy }}

{{ llmPrompt }}

Try asking

which ports are open on example.com? is mail.example.com exposed? does example.com have known CVEs?

{{ routePath }}

Settings

01 · PROFILE

Name

Shown to your team and in audit logs.

Used for login and alert delivery. Changing it needs confirmation from the new address.

UNCONFIRMED{{ pendingEmail }}

02 · SECURITY

Two-factor authentication is off

Your account controls scans for your whole organisation. Protect it with a second factor.

Enable 2FA

Two-factor (2FA)

Authenticator app or recovery codes.

{{ mfaL }}Manage

Password

Change it any time; other sessions are signed out.

Active sessions

03 · ORGANISATION & TEAM{{ teamCount }}

Organisation name

Appears on invoices and invites.

Organisation name

Only account admins can rename the organisation.

{{ tu.email }} · you

Only account admins can invite or manage members.

04 · ROLES & PERMISSIONS

A granular roles & permissions matrix (Admin / Member / Viewer per capability) is in build. For now, members are either Admin (full access) or Member, managed under Organisation & team above.

05 · WHITE-LABEL REPORTS{{ wlTag }}

Applies to the daily report and scan report PDFs your customers receive. The Athorion trust-seal advert is removed on your white-label reports.

Company name

Accent colour

HEX

Low contrast on white - the score and headings may be hard to read in the PDF.

Website Footer note optional

Report language

Language of your white-label PDFs. Until you pick one they follow your report language.

Logo

Drop PNG or JPEG · max 512 KB

LIVE PREVIEW · PDF PAGE 1{{ pvLangTag }}

72 / 100C{{ pvRating }}
{{ pvScale }}
{{ pvGrades }}

1. {{ pvR1 }}

2. {{ pvR2 }}

White-label

Reports in your own brand

Your logo, colour and company name on every PDF your customers receive. Included in Nightly Audit + Seal, Cyber Intelligence and Ecosystem.

06 · REPORTS

Report language

Language of the daily report email and alerts.

Daily report email

How often you receive the daily report. Weekly arrives on Mondays.

Accepted risks

Accepted findings are excluded from your security score and from alerts. Accept a risk from a vulnerability's detail (Vulnerabilities → open a CVE → Accept risk); each one needs a reason.

No accepted risks yet.

07 · AUDIT LOG

                        {{ stAuditRange }}
                        
                        {{ stAuditPageL }}

No audit events yet.

Retained for 12 months. Export as CSV or JSON for ISO 27001 / NIS2 evidence.

08 · PLAN & USAGE{{ planName }}

Need higher limits? Enterprise plans are unlimited.

Contact sales →

09 · ACCOUNT

Export your data, leave the organisation or close the account.

Leave this organisation

Your own login is removed. The organisation and its data stay for your colleagues.

Download your data

Everything in one ZIP: domains, findings (CSV), pen-tests, ratings, alert rules, team and audit log.

Delete account

Deletes the whole organisation for everyone. It is locked at once and erased after {{ dzDays }} days - until then a link in the confirmation email undoes it.

Only an account admin can delete the organisation.

Saved ✓

{{ routePath }}

Platform overview

Updated 4 s ago

{{ k.label }}

System health

{{ sv.name }}

{{ sv.st }}

Redpanda consumer lag{{ lagScope }}{{ lagNow }}

Recent audit events

{{ routePath }}

Acquisition funnel

Landing check → report → fix clicked → signup · last {{ fnDays }} days

Loading …

{{ k.label }}

Checks per day

Product funnel · signups

{{ k.label }}

Product-qualified leadsMail to you from {{ actPqlTh }} points

No scored accounts yet. Scores are computed hourly from usage and fit.

Use cases: {{ actUse }}
Signup sources: {{ actSrc }}

Onboarding · setup guide

No accounts in the setup guide yet.

{{ op.label }}{{ op.tenants }} accounts · {{ op.completed }} done · {{ op.median }}

{{ os.title }}{{ os.n }} · {{ os.pct }}

Reminders sent: {{ op.nudges }} · Guide hidden before done: {{ op.dismissed }}

{{ routePath }}

Marketing

Campaigns to consented contacts · NIS2 audit orders

Only contacts with consent are ever included: leads who ticked the marketing box, confirmed KEV subscribers (security content only) and verified customers (news about our own similar products only). Exposure-report downloads and seal contacts are never included. Every mail carries a one-click unsubscribe.

Campaigns

No campaigns yet. Create one to write a mail and pick its audience.

Pick a campaign on the left or create a new one.

{{ k.label }}

This campaign was sent and is read-only. Duplicate it to reuse the content.

Campaign name (internal)

Content per language

English is required and is sent to everyone whose language has no text. Leave other languages empty to fall back to English.

Subject Body

Markup: ## heading · > callout · ::kv / ::stats rows · 1. numbered steps · blank line = new paragraph. {domain} = the lead's checked domain (otherwise "your domain"). The unsubscribe line is added automatically.

Button label Button URL

Audience

Sources

Languages

none selected = all

Plans

customers only · none = all

Added

{{ mkTotal }}recipients{{ mkBreakdown }}{{ mkSupp }}unsubscribed, excluded

Send this campaign now?

{{ mkTotal }}recipients≈ {{ mkMinutes }} min

This cannot be undone, but you can stop the rest while it is sending.

Preview (exactly what is sent)

AI sequence{{ asStL }}{{ asEnrolled }}enrolled·{{ asDue }}due now

3 mails over 10 days (day 0, 4 and 10) to consented contacts only: leads who ticked the marketing box, confirmed KEV subscribers and verified customers. Consent is re-checked before every mail, an unsubscribe stops the rest, and leads who tick the box on the AI attack check join automatically. Edit the 4 mails under Mail templates, group Marketing.

{{ st.no }}{{ st.dayL }}{{ st.dayN }}

{{ k.label }}{{ k.v }}

Enrol

{{ asTotal }}eligible contacts{{ asBreakdown }}already enrolled contacts are skipped

NIS2 audit orders{{ mkOrderStat }}

No orders yet. Paid orders from /nis2-audit appear here (you also get an email).

{{ routePath }}

Accounts & users

{{ routePath }}

Plan {{ acct.planName }}Subscription {{ acct.psLine }}Status ● {{ acct.status }}Contact {{ acct.user }} · {{ acct.email }}Created {{ acct.created }}

Seal

Test · simulate a purchase

Like a real checkout: welcome mail with the checklist to the account admin, welcome screen and setup guide on the next login. Not for accounts with a real Stripe subscription.

{{ k.label }}

{{ u.k }}

{{ u.v }}/ {{ u.max }}

{{ routePath }}

Global Internet Scanner

Internet · Attack surface · Open ports · Infrastructure intelligence

Scanner cluster online

{{ scanWorkers }}

{{ k.sub }}

Scan campaigns

Scan throughputhosts/min · last hour

{{ t }}

Current

Peak

{{ peakThr }} /min

Average

{{ avgThr }} /min

Global scan activity{{ scanScopeLabel }}

{{ m.k }}

Live discoveries · open ports{{ liveState }}

TimeIP addressPortInfo

                        {{ d.time }}
                        {{ d.ip }}
                        {{ d.port }} tcp
                        {{ d.info }}
                      

Top portsmost exposed

#Port · serviceHostsShare

                        {{ c.rank }}
                        {{ c.country }}
                        {{ c.hosts }}
                        {{ c.pct }}
                      

IoT & OT exposure{{ iotHosts }} hosts

No IoT/OT services observed in scope yet.

                        {{ d.service }}{{ d.port }} · {{ d.catL }}
                        {{ d.hosts }}

Recent findings

TimeSevFinding

                        {{ f.time }}
                        {{ f.sev }}
                        {{ f.finding }}{{ f.ip }}
                      

{{ routePath }}

Blocklist & abuse

Abuse inbox · opt-out requests{{ abuseOpen }}

{{ ab.org }}● {{ ab.status }}

{{ ab.cidr }} · {{ ab.from }}

Scan identity · served at /v1/scan/identity

Abuse contact Scanner description Opt-out text

{{ idn.json }}

{{ routePath }}

Tier 2 authorizations

{{ routePath }}

API Keys

Issue keys to partners (e.g. a speed-test that offers a security scan). A scan-scoped key can only call the on-demand scan flow; set a daily quota, track usage, revoke anytime.

New key for {{ apiKeySecretName }} - copy it now, it is shown only once

Webhook signing secret (HMAC verification; also retrievable later):

PartnerScopePrefixQuota/dUsed/dTotalStatus

No API keys yet. Create one to onboard a partner.

{{ k.partner }}{{ k.scope }}{{ k.prefix }}…{{ k.quota }}{{ k.usedToday }}{{ k.usedTotal }}{{ k.status }}

Partner flow

# 1) start a scan           2) poll            3) get the PDF
curl -s -X POST https://app.athorion.io/v1/scans \
  -H "Authorization: Bearer $KEY" -H "Content-Type: application/json" \
  -d '{"target":"example.com"}'          # -> {"id":"<job>", ...}
curl -s https://app.athorion.io/v1/scans/<job> -H "Authorization: Bearer $KEY"
  # -> status, findings[], counts, kev_count, pdf_url (when status=done)
# pdf_url is a direct link to the scan report PDF.

{{ routePath }}

Data & index

{{ k.label }}

Open ports · distribution

{{ pd.p }}{{ pd.n }}

Freshness · last seen by hourdarker = staler

0006121823

ClickHouse volume · 12 months4.81 TB

Audit log

Impersonation

LLM backend

{{ b.meta }}

{{ routePath }}

Lead CRM

Everyone who left an address - from the exposure report request or the sign-up popup. Move each lead through the pipeline, add a note, and see who already has an account.

{{ k.label }}

Leads

No leads match these filters yet.

{{ l.email }} {{ l.domain }} {{ l.srcLabel }} ✓ ACCOUNT CONSENT HELP CLICKED unsubscribed {{ l.when }}

Recent deep checks (anonymous){{ checkCount }}

No checks match.

{{ routePath }}

Feedback

In-product reports from the feedback widget and auto-captured client errors. Work each item through the pipeline and add a note.

{{ k.label }}

No feedback matches these filters yet.

{{ routePath }}

Identity checks

Customers verify their identity before they can call the dual-use NAUTILUS / MANTA models through an API key. Approve to unlock the LLM API for that workspace, or reject with a reason - both email the submitter.

{{ k.label }}

No identity checks in this view.

Name {{ k.name }}

Email {{ k.email }}

Country {{ k.country }}

Workspace {{ k.tenant }}

{{ k.reason }}

Review note: {{ k.note }}

{{ routePath }}

Plans & quota

Public pricing →

{{ pl.n }}

Usage vs. limit

{{ routePath }}

Console settings

My 2FA {{ mfaL }}

Operators (dash access)

Platform defaults & governance

Mail templates

Subject, body and button of every mail. Edits go live on the next send. Mails tagged PREVIEW are composed from live data and are read-only for now.

{{ g.title }}

Pick a mail on the left to edit its content, preview exactly what is sent, and see its recent sends.

{{ etSelName }}{{ etSelKind }} · {{ etSelTrigger }}{{ etSelStL }}EDITED

Subject Body

Markup: ## heading · > callout · ::kv / ::stats rows (label | value) · !critical / !high / !medium finding · 1. numbered steps · blank line = new paragraph.Keep these placeholders - filled in on send: {{ etPlaceholders }}

Button label Button URL

This mail is composed from live data (findings, scores, loops) and is preview-only for now - its content still comes from code. Ask to have it wired for editing.

Preview (exactly what is sent)

Recent sends (Ausgänge){{ etSendsStat }}Lead CRM →

No sends of this mail yet.

{{ pgGreet }}

{{ greetH }}

Internet index

{{ host.ip }}

Attribution graph

Monitored assets

Threat intelligence

Third-party risk

Billing

Alerts

Your trust seal

Pen-Test AI · TIER 3

Security rating

Vulnerabilities

Authorized scans

Reports

API & tokens

Cybersecurity LLM API

API keys

Settings

Platform overview

Acquisition funnel

Marketing

Accounts & users

{{ acct.org }}

Global Internet Scanner

Blocklist & abuse

Tier 2 authorizations

API Keys

Data & index

Audit log

Lead CRM

Feedback

Identity checks

Plans & quota

Console settings

{{ aoPre }}{{ aoTerm }}i{{ aoPost }}

Athorion was just updated

Responsible use

{{ upTitle }}