HorusSecurity automation for small teams.

Discover your attack surface, scan for vulnerabilities, correlate findings against live threat intelligence, and surface only what needs your attention.

Get started

View on GitHub

Live demo

🔍

Attack surface discovery

Subdomain enumeration via CT logs and DNS brute-force, network CIDR sweeps, automatic asset inventory.

🛡️

Vulnerability scanning

Nmap port/service detection, Nuclei template engine, ZAP DAST web scanning — all feeding a unified findings pipeline.

🧠

AI agent pipeline

8-stage pipeline with Red/Blue adversarial debate on ambiguous findings. Verdicts stored and reused across scans.

📡

Threat intelligence

NVD CVE/CVSS/EPSS, CISA KEV, HIBP breach data, IntelX credentials, abuse.ch feeds, ransomware.live — correlated per asset.

🚨

Incident management

Case management with linked findings, append-only notes, and status tracking from triage to resolution.

🦀

Iris daemon

Lightweight Rust daemon that monitors your servers via journald and auditd, reporting events back with AI triage.