Please wait before trying again
AI-assisted vulnerability scanning, attack surface discovery, and CVE monitoring for teams that need clear, repeatable security checks.
Continuous mapping of your attack surface across every layer — from exposed APIs to shadow infrastructure nobody told you about.
Correlates scan findings with CVE intelligence and severity data so teams can focus on the exposures most likely to matter.
Runs repeatable security checks and rescans to help confirm findings and verify whether remediation changed the exposed attack surface.
Reviews exposed services, TLS configuration, DNS, headers, and detected technologies for common weaknesses and outdated components.
Continuous red-team operations powered by threat actor profiles. We think like them so you don't have to.
Distributed sensor mesh across your infrastructure. Silent watchers that leap into action the moment anomalies surface.
Recent vulnerability analysis and defensive notes from the Vesamuni research desk.
Comprehensive reconnaissance of your digital terrain. We discover assets, dependencies, and exposures across cloud, on-prem, and hybrid environments.
Contextual risk scoring powered by threat intelligence feeds, adversary TTPs, and your unique business logic. Not just CVEs — real-world exploitability.
Automated hardening recommendations deployed through your existing CI/CD pipeline. Security becomes part of the build, not an afterthought.
Continuous learning from global threat landscapes. The platform adapts its defensive posture as adversary capabilities shift and new vectors emerge.
Join the organisations that refuse to be reactive. Get early access to the Vesamuni intelligence platform.
We integrate with the world's most trusted security data sources and infrastructure providers to deliver comprehensive threat intelligence.
AI-native search API powering real-time threat research and exploit discovery across the web.
tavily.comNIST National Vulnerability Database providing authoritative CVE data, CVSS scores, and security advisories.
nvd.nist.govComprehensive vulnerability intelligence with exploit databases, patch tracking, and threat correlation.
vulners.comSecure tunneling infrastructure enabling real-time webhook delivery and agent connectivity.
ngrok.comVesamuni is an early-stage cyber security platform that brings vulnerability scanning, CVE intelligence, attack surface discovery, and security reporting into a single dashboard.
Account access uses server-side sessions, Argon2 password hashing, CSRF protection, secure cookies, and optional authenticator-based two-factor authentication.
Vesamuni is currently in early access. Approved clients receive an account from the team.
The current client dashboard uses secure server-side sessions. Public API credentials are not generally available during early access.
A public scanning API is planned but not yet released. Current HTTP endpoints support the website, account management, billing, and internal administration.
Stripe billing is available now. Additional workflow integrations and public SDKs are roadmap items and will be documented only when released.
Vesamuni was founded with a singular conviction: the asymmetry between attackers and defenders is a design problem, not an inevitability.
We don't believe in security theatre. Every feature should help teams discover, understand, or remediate a real exposure. Vesamuni is being built iteratively with feedback from security-minded operators and developers.
We operate from Melbourne, Australia and Colombo, Sri Lanka. Our distributed startup team combines product development with security research across the APAC region.
Melbourne connects us to Australia's security market. Colombo connects us to South Asia's rapidly growing tech ecosystem. The two locations give the team access to different customers, talent pools, and perspectives.
Vesamuni (වෙසමුනි) — In Sri Lankan folklore, Vesamuni is the fearsome king of demons. He rules the Yakkas with an iron fist, commanding spirits that once spread chaos across the land. Yet he chose to protect rather than destroy — forbidding his demons from killing, transforming them into instruments of order.
Armed with a magical golden sword that flies from his hand to strike down enemies before they see it coming, Vesamuni embodies power turned to protection.
We do the same. The tools of attackers, wielded by defenders.
We're a small team building something meaningful. If you're passionate about security and want to make an impact, we'd love to hear from you.
founders@vesamuni.comMelbourne, Australia · Colombo, Sri Lanka · Remote
We're working on publishing our security research. Follow us to get notified when we release new findings.
research@vesamuni.comUpdates from the Vesamuni team on defensive engineering, attack surface management, vulnerability research, and practical security operations.
Whether you're evaluating the platform, exploring a partnership, or have a security research inquiry, we'd love to hear from you.
Continuous security testing priced by protected asset, not by scan. Run unlimited rescans, monitor new CVEs, and use monthly AI pentest credits for deeper validation.
Monthly subscriptions. Cancel or change plan from the billing portal.
Network vulnerability assessment, attack surface discovery, cloud checks, and continuous CVE monitoring for small security teams.
AI-guided security with unlimited automated scans. Broader coverage across your full web presence with weekly reporting and real-time CVE alerting.
Deep vulnerability testing and reporting with the highest self-service AI pentest allowance, continuous asset monitoring, API access, and configurable exports.
A custom software plan for larger asset inventories, additional testing capacity, tailored scan schedules, and product onboarding. Scope and limits are agreed before activation.
| Scout | Sentinel | Vanguard | Enterprise | |
|---|---|---|---|---|
| Price | $79/mo | $149/mo | $249/mo | Custom |
| Protected Assets | 5 assets | 5 assets | 5 assets | Unlimited |
| Scans & Rescans | Unlimited | Unlimited | Unlimited | Unlimited |
| AI Pentest Scans / mo | 1 | 3 | 10 | Unlimited |
| NVD Database Access | ✓ | ✓ | ✓ | ✓ |
| NVD/CVE Monitoring | — | ✓ | Real-time | Real-time |
| Reports | Basic | Weekly | Custom | Custom + Board-ready |
| Email Alerts | — | ✓ | Real-time | Real-time |
| API Access | — | — | ✓ | Full + Webhooks |
| Remediation Guidance | Basic | Prioritised | Priority + Context | Priority + Context |
| Attack Surface Discovery | — | ✓ | Continuous | Full ASM |
| Web App Scanning | WordPress | Any web asset | Full stack | Full stack + API + Cloud |
| Compliance Mapping | — | — | ✓ | Control indicators |
| Custom Report Templates | — | — | ✓ | ✓ |
Pay month to month in USD. Change or cancel through Stripe's secure billing portal.
Plans limit unique protected assets, not scans. Rescan covered assets as often as needed.
Introductory rates for independent security researchers, academic institutions, and registered non-profits. Reach out and mention your organisation type.
Start on any tier and upgrade at any time. Your scan history, configurations, and discovered assets carry over seamlessly.
Custom software plan for larger asset allowances, additional testing credits, tailored scan schedules, onboarding, and priority product support.
Join the organisations that refuse to be reactive. Get early access to the Vesamuni intelligence platform.
Use the client account issued by Vesamuni.
Monitor your subscription, protected perimeter, and account security.