Vesamuni is an AI-assisted security platform for vulnerability scanning, attack surface mapping, CVE monitoring, and security reporting.

Where is Vesamuni based?

Vesamuni operates from Melbourne, Australia and Colombo, Sri Lanka.

How can I subscribe to Vesamuni?

Review the available plans on the pricing page or contact Vesamuni for a custom software plan.

Too Many Attempts

Please wait before trying again

Cyber Intelligence Platform

See what
others can't.

AI-assisted vulnerability scanning, attack surface discovery, and CVE monitoring for teams that need clear, repeatable security checks.

All Systems Operational · Threat Level Nominal

Threat IntelligenceAttack Surface MappingAutonomous ResponseZero-Day DetectionNetwork ForensicsAdversary SimulationVulnerability OrchestrationContinuous MonitoringThreat IntelligenceAttack Surface MappingAutonomous ResponseZero-Day DetectionNetwork ForensicsAdversary SimulationVulnerability OrchestrationContinuous Monitoring

Collaborating with global innovators

Working natively with leading platforms

Accepted into global startup programs

Capabilities

Built for the threats that haven't happened yet.

001

Threat Cartography

Continuous mapping of your attack surface across every layer — from exposed APIs to shadow infrastructure nobody told you about.

002

Risk Prioritisation

Correlates scan findings with CVE intelligence and severity data so teams can focus on the exposures most likely to matter.

003

Automated Validation

Runs repeatable security checks and rescans to help confirm findings and verify whether remediation changed the exposed attack surface.

004

Protocol & Configuration Checks

Reviews exposed services, TLS configuration, DNS, headers, and detected technologies for common weaknesses and outdated components.

005

Adversary Emulation

Continuous red-team operations powered by threat actor profiles. We think like them so you don't have to.

006

Sentinel Protocol

Distributed sensor mesh across your infrastructure. Silent watchers that leap into action the moment anomalies surface.

Real-Time Intelligence

The network never sleeps.

NVD Sync Interval

Scans Executed Daily

CVEs in Coverage Database

Threat Intel Feeds Integrated

Latest Research

Fresh from our research desk.

Recent vulnerability analysis and defensive notes from the Vesamuni research desk.

Latest research is loading.

View all research →

Our Approach

Defence in depth,
by design.

Map

Comprehensive reconnaissance of your digital terrain. We discover assets, dependencies, and exposures across cloud, on-prem, and hybrid environments.

Analyse

Contextual risk scoring powered by threat intelligence feeds, adversary TTPs, and your unique business logic. Not just CVEs — real-world exploitability.

Fortify

Automated hardening recommendations deployed through your existing CI/CD pipeline. Security becomes part of the build, not an afterthought.

Evolve

Continuous learning from global threat landscapes. The platform adapts its defensive posture as adversary capabilities shift and new vectors emerge.

Ready to see
everything?

Join the organisations that refuse to be reactive. Get early access to the Vesamuni intelligence platform.

Built on industry-leading intelligence.

We integrate with the world's most trusted security data sources and infrastructure providers to deliver comprehensive threat intelligence.

Tavily

AI-native search API powering real-time threat research and exploit discovery across the web.

tavily.com

NVD

NIST National Vulnerability Database providing authoritative CVE data, CVSS scores, and security advisories.

nvd.nist.gov

Vulners

Comprehensive vulnerability intelligence with exploit databases, patch tracking, and threat correlation.

vulners.com

ngrok

Secure tunneling infrastructure enabling real-time webhook delivery and agent connectivity.

ngrok.com

Documentation

Platform Documentation

Overview Getting Started Authentication API Reference Integrations

Overview

Vesamuni is an early-stage cyber security platform that brings vulnerability scanning, CVE intelligence, attack surface discovery, and security reporting into a single dashboard.

Account access uses server-side sessions, Argon2 password hashing, CSRF protection, secure cookies, and optional authenticator-based two-factor authentication.

Getting Started

Vesamuni is currently in early access. Approved clients receive an account from the team.

Step 1
Receive and accept your client invitation.

Step 2
Sign in and add the public URL you want to monitor.

Step 3
Enable two-factor authentication from the security dashboard.

Step 4
Contact the team to confirm scan scope during early access.

Authentication

The current client dashboard uses secure server-side sessions. Public API credentials are not generally available during early access.

API Reference

A public scanning API is planned but not yet released. Current HTTP endpoints support the website, account management, billing, and internal administration.

Integrations

Stripe billing is available now. Additional workflow integrations and public SDKs are roadmap items and will be documented only when released.

About

We build what defenders need.

Vesamuni was founded with a singular conviction: the asymmetry between attackers and defenders is a design problem, not an inevitability.

Our Philosophy

We don't believe in security theatre. Every feature should help teams discover, understand, or remediate a real exposure. Vesamuni is being built iteratively with feedback from security-minded operators and developers.

Global Presence

We operate from Melbourne, Australia and Colombo, Sri Lanka. Our distributed startup team combines product development with security research across the APAC region.

Why Two Continents?

Melbourne connects us to Australia's security market. Colombo connects us to South Asia's rapidly growing tech ecosystem. The two locations give the team access to different customers, talent pools, and perspectives.

The Name

Vesamuni (වෙසමුනි) — In Sri Lankan folklore, Vesamuni is the fearsome king of demons. He rules the Yakkas with an iron fist, commanding spirits that once spread chaos across the land. Yet he chose to protect rather than destroy — forbidding his demons from killing, transforming them into instruments of order.

Armed with a magical golden sword that flies from his hand to strike down enemies before they see it coming, Vesamuni embodies power turned to protection.

We do the same. The tools of attackers, wielded by defenders.

Careers

Join us.

We're a small team building something meaningful. If you're passionate about security and want to make an impact, we'd love to hear from you.

founders@vesamuni.com

Melbourne, Australia · Colombo, Sri Lanka · Remote

Research

Coming soon.

We're working on publishing our security research. Follow us to get notified when we release new findings.

research@vesamuni.com

ApplicationThe Newsletters WordPress plugin

TypeVulnerability Management

Read post

08/08/2026 / CVE, Vulnerability Management, Security Research

CVE-2026-15805: Rejected reason: This CVE ID has been rejected or with

TypeResource transfer flaw

Read post

16/05/2026 / CVE, CWE-693, Security Research

CVE-2026-8014: Chrome Preload Cross-Origin Data Leak

Applicationgoogle chrome

TypeProtection mechanism failure

Read post

Contact

Let's talk.

Whether you're evaluating the platform, exploring a partnership, or have a security research inquiry, we'd love to hear from you.

hello@vesamuni.com

Melbourne, VIC, Australia

Colombo, Sri Lanka

Response within 24 hours

System Status

Operational Status

All Systems Operational

Threat Intelligence APIOperational

Scan EngineOperational

DashboardOperational

Webhook DeliveryOperational

AuthenticationOperational

CLI / SDKOperational

AI Guided Pentesting Platform

AI Guided Pentesting
that never Stops.

Continuous security testing priced by protected asset, not by scan. Run unlimited rescans, monitor new CVEs, and use monthly AI pentest credits for deeper validation.

Monthly subscriptions. Cancel or change plan from the billing portal.

Network Security

Scout

$79/mo

per month

Network vulnerability assessment, attack surface discovery, cloud checks, and continuous CVE monitoring for small security teams.

Scanning & Testing

5 protected assets with unlimited scans and rescans during each monthly cycle
1 AI pentest scan / month — AI-guided penetration test targeting your highest-risk external asset
Full NVD database access — real-time CVE matching against your installed plugins, themes & core version
OWASP Top 10 coverage with severity scoring (Critical → Info)

Intelligence & Monitoring

NVD-backed plugin & theme vulnerability detection
WordPress core version security tracking
SSL/TLS certificate monitoring
Outdated software & end-of-life component alerts

Reporting

Basic reports — scan summary with findings, severity, and remediation steps
PDF export of scan results
Dashboard access — single-site view

Support

Email support
Vesamuni knowledge base access

Side-by-side comparison
across all tiers.

	Scout	Sentinel	Vanguard	Enterprise
Price	$79/mo	$149/mo	$249/mo	Custom
Protected Assets	5 assets	5 assets	5 assets	Unlimited
Scans & Rescans	Unlimited	Unlimited	Unlimited	Unlimited
AI Pentest Scans / mo	1	3	10	Unlimited
NVD Database Access	✓	✓	✓	✓
NVD/CVE Monitoring	—	✓	Real-time	Real-time
Reports	Basic	Weekly	Custom	Custom + Board-ready
Email Alerts	—	✓	Real-time	Real-time
API Access	—	—	✓	Full + Webhooks
Remediation Guidance	Basic	Prioritised	Priority + Context	Priority + Context
Attack Surface Discovery	—	✓	Continuous	Full ASM
Web App Scanning	WordPress	Any web asset	Full stack	Full stack + API + Cloud
Compliance Mapping	—	—	✓	Control indicators
Custom Report Templates	—	—	✓	✓

Pricing Notes

Transparent Monthly Billing

Pay month to month in USD. Change or cancel through Stripe's secure billing portal.

Asset-based Allowances

Plans limit unique protected assets, not scans. Rescan covered assets as often as needed.

Researchers & Non-profits

Introductory rates for independent security researchers, academic institutions, and registered non-profits. Reach out and mention your organisation type.

Upgrades

Start on any tier and upgrade at any time. Your scan history, configurations, and discovered assets carry over seamlessly.

Enterprise

Custom software plan for larger asset allowances, additional testing credits, tailored scan schedules, onboarding, and priority product support.

Ready to see
everything?

Join the organisations that refuse to be reactive. Get early access to the Vesamuni intelligence platform.

Protected Workspace

Security Dashboard

Monitor your subscription, protected perimeter, and account security.

Plan Checking... Loading billing status

Protected Assets 0 / 0 No perimeter configured

Account Security Checking... Reviewing controls

Subscription Renewal Not scheduled Managed securely by Stripe

Protected Perimeter

Primary monitored asset

Pending setup

Credentials

Change password

🐸

Too Many Attempts

See whatothers can't.

Built for the threats that haven't happened yet.

Threat Cartography

Risk Prioritisation

Automated Validation

Protocol & Configuration Checks

Adversary Emulation

Sentinel Protocol

The network never sleeps.

Fresh from our research desk.

Defence in depth,by design.

Map

Analyse

Fortify

Evolve

Ready to seeeverything?

Built on industry-leading intelligence.

Tavily

NVD

Vulners

ngrok

Platform Documentation

Contents

Overview

Getting Started

Authentication

API Reference

Integrations

We build what defenders need.

Our Philosophy

Global Presence

Why Two Continents?

The Name

Join us.

Coming soon.

Security notes, product thinking, and threat intelligence.

CVE-2026-86551: Z80Ultra (NX741J) product contains a vulnerability whe

CVE-2026-93957: A vulnerability has been found in olivier-ls PHP-FTS u

CVE-2026-93958: A vulnerability was found in D-Link R95 BE9500_1.00.16

CVE-2026-94083: Suricata before 8.0.7 has a DoH2 type confusion that c

CVE-2026-94084: Suricata before 8.0.7 has an Http2ThreadMultiBuf use-a

CVE-2026-77875: application protects access through its calculator-sty

CVE-2026-93921: SiYuan versions through 3.8.4 fail to enforce publish

CVE-2026-93922: SiYuan through 3.8.4 renders notebook names as raw HTM

CVE-2026-93923: SiYuan through 3.8.4 fails to escape heading style att

CVE-2026-77820: WPComplete plugin for WordPress

CVE-2026-18441: Appointment Booking Plugin – LatePoint | Calendar & Sc

CVE-2026-2585: Brizy – Page Builder plugin for WordPress

CVE-2026-62874: Insufficient verification of data authenticity in Azur

CVE-2026-69843: Authentication bypass by spoofing in Microsoft Fabric

CVE-2026-83946: Improper neutralization of input during web page gener

CVE-2026-81546: Affinity by Canva application before 3.3.0 (September

CVE-2026-92838: A DLL hijacking vulnerability exists in the GeoVision

CVE-2026-89064: All-in-One WP Migration and Backup plugin for WordPres

CVE-2026-50603: A vulnerability has been identified in the Acer Agent

CVE-2026-86311: Photo Gallery by 10Web – Mobile-Friendly Image Gallery

CVE-2026-15638: An unauthenticated user with access to Secret Server c

CVE-2026-15639: An attacker can craft a malicious link that, if used b

CVE-2026-15640: Under certain conditions a valid SAML IdP response may

CVE-2026-73446: On affected platforms running Arista EOS with IS-IS co

CVE-2026-73459: On affected platforms running Arista EOS with IS-IS co

CVE-2026-90840: A vulnerability was identified in PHPGurukul Blood Don

CVE-2026-90841: A security flaw has been discovered in PHPGurukul Bloo

CVE-2026-90842: A weakness has been identified in PHPGurukul Blood Don

CVE-2026-85575: ShopEngine Elementor WooCommerce Builder Addon – All i

CVE-2026-85657: Co-Authors, Multiple Authors and Guest Authors in an A

CVE-2022-42917: In FRRouting FRR before 8.5, the service user (usually

CVE-2024-53922: An issue was discovered in the buffer queue driver in

CVE-2025-63842: A Cross-Site Scripting (XSS) vulnerability in the web

CVE-2026-90604: A security flaw has been discovered in Totolink A3002M

CVE-2026-90605: A weakness has been identified in Totolink A3002MU Hh-

CVE-2026-90488: A vulnerability was determined in Xuxueli xxl-job up t

CVE-2026-90489: A vulnerability was identified in Xuxueli xxl-job up t

CVE-2026-90648: wasm2c in WebAssembly wabt through 1.0.41 allows sandb

CVE-2026-90651: Socket Firewall (socketdev/socket-registry-firewall) i

CVE-2026-90490: A security flaw has been discovered in lenve vhr 1.0-S

CVE-2026-89266: stb_vorbis through 1.22 contains a heap buffer overflo

CVE-2026-89267: starlette-admin versions 0.16.1 through 0.17.1 fail to

CVE-2026-89268: QloApps through 1.7.0 renders back-office list filter

See what
others can't.

Defence in depth,
by design.

Ready to see
everything?