Core Capabilities

Explore the product architecture that connects XSCAN Supply Chain, XSCAN Server Runtime, and XSCAN Secure Asset.

Binary Analysis & SBOM

XSCAN Supply Chain

Analyzes compiled binaries to identify open source vulnerabilities without source code.

XSCAN Supply Chain

XSCAN Server Runtime

📄

Source

🏗️

Build

🔍

Analyzed

🚀

Deployed

⏱️

Runtime

Snapshot-based Analysis

XSCAN Server Runtime

Performs snapshot-based analysis of running processes to identify the Actual Attack Surface.
Prioritizes response by filtering out non-critical vulnerabilities.

XSCAN Supply Chain

XSCAN Server Runtime

📄

Source

🏗️

Build

🔍

Analyzed

🚀

Deployed

⏱️

Runtime

Integrated Open Source Governance

XSCAN Secure Asset

Connect the outputs of XSCAN Supply Chain and XSCAN Server Runtime into one Development, Supply Chain, and Runtime governance workflow.

Move beyond point analysis and connect open source vulnerability response into one operating model.

XSCAN Secure Asset

📄

Source

🏗️

Build

🔍

Analyzed

🚀

Deployed

⏱️

Runtime

Deployment Options

Supported Deployment Models

XSCAN supports SaaS, On-Premise, and Hybrid deployments based on each product's role and operating environment.

SaaS by default, Hybrid supported

Default Model

SaaS

Cloud-based service operation

Hybrid Support

Internal Network

Management Server

SaaS Vulnerability DB

Internal Management Server + SaaS Vulnerability DB

On-Premise by default, Hybrid supported

Default Model

On-Premise

Deployed inside the enterprise network

Hybrid Support

Internal Network

Management Server

SaaS Vulnerability DB

Internal Management Server + SaaS Vulnerability DB

Risk-Based Vulnerability Prioritization

Prioritize the risks that require action by combining CVE, EPSS, and KEV intelligence.

CVE

Vulnerability Identification

CVE identifies which software has which publicly known security vulnerability.

EPSS

Exploit Likelihood Prediction

EPSS helps filter large vulnerability backlogs by estimating which issues are more likely to be exploited.

KEV

Known Exploitation Check

KEV highlights vulnerabilities already observed in real-world attacks, so urgent risks are not missed.

Risk

Action Priority Operations

CVE, EPSS, KEV, and asset impact are combined to clarify what security teams should remediate first.