Too Many Attempts

Please wait before trying again

30
Takedowns ↗
Cyber Intelligence Platform

See what
others can't.

AI-assisted vulnerability scanning, attack surface discovery, and CVE monitoring for teams that need clear, repeatable security checks.

Vulnerabilities reported to
Works natively with
Accepted into
NVIDIA
Inception Program
Zendesk
for Startups
Products

One team. Two ways
we keep you safe.

Takedowns takedowns.vesamuni.com ↗

Find the leaks.
Take them down.

Leak removal for creators and survivors. Scans find copies across Google, Reddit, Telegram and file hosts, and Vesamuni files the takedowns as your agent, so the people posting your content never see your name.

  • Anonymous DMCA filing
  • Google & Bing delisting
  • Scheduled re-checks
380,000+pirate links removed
Run a free leak scan →
Vesamuni Platform Early access

See what
others can't.

Vulnerability scanning, attack surface discovery and CVE monitoring for teams that need clear, repeatable security checks.

  • Attack surface mapping
  • CVE intelligence, synced every 15 min
  • Rescans that confirm the fix
Explore the platform →
Capabilities

Built for the threats that haven't happened yet.

001

Threat Cartography

Continuous mapping of your attack surface across every layer — from exposed APIs to shadow infrastructure nobody told you about.

002

Risk Prioritisation

Correlates scan findings with CVE intelligence and severity data so teams can focus on the exposures most likely to matter.

003

Automated Validation

Runs repeatable security checks and rescans to help confirm findings and verify whether remediation changed the exposed attack surface.

004

Protocol & Configuration Checks

Reviews exposed services, TLS configuration, DNS, headers, and detected technologies for common weaknesses and outdated components.

Real-Time Intelligence

The network never sleeps.

0
NVD Sync Interval
0
Scans Executed Daily
0
CVEs in Coverage Database
0
Threat Intel Feeds Integrated

Data from NIST NVD, Vulners and Tavily search.

Latest Research

Fresh from our research desk.

Recent vulnerability analysis and defensive notes from the Vesamuni research desk.

Latest research is loading.
View all research →

Ready to see
everything?

Join the organisations that refuse to be reactive. Get early access to the Vesamuni intelligence platform.

Documentation

Platform Documentation

Contents

OverviewGetting StartedAuthenticationAPI ReferenceIntegrations

Overview

Vesamuni is an early-stage cyber security platform that brings vulnerability scanning, CVE intelligence, attack surface discovery, and security reporting into a single dashboard.

Account access uses server-side sessions, Argon2 password hashing, CSRF protection, secure cookies, and optional authenticator-based two-factor authentication.

Getting Started

Vesamuni is currently in early access. Approved clients receive an account from the team.

Step 1
Receive and accept your client invitation.

Step 2
Sign in and add the public URL you want to monitor.

Step 3
Enable two-factor authentication from the security dashboard.

Step 4
Contact the team to confirm scan scope during early access.

Authentication

The current client dashboard uses secure server-side sessions. Public API credentials are not generally available during early access.

API Reference

A public scanning API is planned but not yet released. Current HTTP endpoints support the website, account management, billing, and internal administration.

Integrations

Stripe billing is available now. Additional workflow integrations and public SDKs are roadmap items and will be documented only when released.

About

We build what defenders need.

Vesamuni was founded with a singular conviction: the asymmetry between attackers and defenders is a design problem, not an inevitability.

What we build

Takedowns finds leaked and non-consensual content across Google, Reddit, Telegram and file hosts, and files the removal notices as the owner's agent, so creators and survivors never have to put their own name on them. More than 380,000 pirate links have been removed so far.

The Vesamuni Platform brings vulnerability scanning, CVE intelligence and attack surface discovery into one dashboard for teams that need clear, repeatable security checks.

Our research desk publishes analysis of new CVEs every day, and the team has found and reported vulnerabilities through the bug bounty programs of companies including Xiaomi, Polygon, Anduril and KOHO.

Our Philosophy

We don't believe in security theatre. Every feature should help teams discover, understand, or remediate a real exposure. Vesamuni is being built iteratively with feedback from security-minded operators and developers.

Melbourne & Colombo

We work from Melbourne, Australia and Colombo, Sri Lanka: one close to Australia's security market, one in South Asia's fast-growing tech scene.

The Name

Vesamuni (වෙසමුනි) — In Sri Lankan folklore, Vesamuni is the fearsome king of demons. He rules the Yakkas with an iron fist, commanding spirits that once spread chaos across the land. Yet he chose to protect rather than destroy — forbidding his demons from killing, transforming them into instruments of order.

Armed with a magical golden sword that flies from his hand to strike down enemies before they see it coming, Vesamuni embodies power turned to protection.

We do the same. The tools of attackers, wielded by defenders.

Careers

Join us.

We're a small team building something meaningful. If you're passionate about security and want to make an impact, we'd love to hear from you.

founders@vesamuni.com

Melbourne, Australia · Colombo, Sri Lanka · Remote

Research

Coming soon.

We're working on publishing our security research. Follow us to get notified when we release new findings.

research@vesamuni.com
Research

Security notes and threat intelligence.

New CVEs analysed every day by the Vesamuni research desk: what is affected, how severe it is, and what defenders should do. 806 posts

CVE-2026-12773: A weakness has been identified in BerriAI litellm up t
22/06/2026 / CVE, CWE-287, Security Research

A weakness has been identified in BerriAI litellm up to 1.59.8

ApplicationBerriAI litellm
TypeImproper authentication
Read post
CVE-2026-12774: A security vulnerability has been detected in BerriAI
22/06/2026 / CVE, CWE-918, Security Research

A security vulnerability has been detected in BerriAI litellm up to 1.82.2

ApplicationBerriAI litellm
TypeServer-side request forgery
Read post
CVE-2026-48908: A vulnerability in SP Page Builder for Joomla allows u
22/06/2026 / CVE, CWE-284, Security Research

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately…

ApplicationSP Page Builder for Joomla
TypeAccess control vulnerability
Read post
CVE-2026-48909: SP LMS (com_splms) 4.1.4 by JoomShaper deserializes
22/06/2026 / CVE, CWE-502, Security Research

SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an…

ApplicationSP LMS (com_splms)
TypeSoftware weakness
Read post
CVE-2026-48939: A vulnerability in the iCagenda extension for Joomla a
22/06/2026 / CVE, CWE-284, Security Research

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment…

Applicationthe iCagenda extension for Joomla
TypeAccess control vulnerability
Read post
CVE-2019-25763: WordPress Ultimate Addons for Beaver Builder 1.2.4.1 c
22/06/2026 / CVE, CWE-288, Security Research

WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows…

ApplicationWordPress Ultimate Addons for Beaver Builder
TypeSoftware weakness
Read post
CVE-2020-37255: WordPress Time Capsule Plugin 1.21.16 contains an auth
22/06/2026 / CVE, CWE-288, Security Research

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated…

ApplicationWordPress Time Capsule Plugin
TypeSoftware weakness
Read post
CVE-2026-11775: User Admin Simplifier plugin for WordPress
20/06/2026 / CVE, CWE-352, Security Research

The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…

ApplicationThe User Admin Simplifier plugin for WordPress
TypeSoftware weakness
Read post
CVE-2026-8805: Integer Overflow or Wraparound vulnerability in the Et
20/06/2026 / CVE, CWE-190, Security Research

Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mitsubishi Electric MELSEC iQ-F Series…

ApplicationApplication not specified
TypeSoftware weakness
Read post
CVE-2026-8806: Expected Behavior Violation vulnerability in Mitsubish
20/06/2026 / CVE, CWE-440, Security Research

Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module…

Applicationa short period of time
TypeSoftware weakness
Read post
CVE-2025-7737: DoS Vulnerability in 10G iSCSI Interface of Hitachi Vi
20/06/2026 / CVE, CWE-770, Security Research

DoS Vulnerability in 10G iSCSI Interface of Hitachi Virtual Storage Platform

ApplicationDoS Vulnerability in 10G
TypeSoftware weakness
Read post
CVE-2026-10034: WP DSGVO Tools (GDPR) plugin for WordPress
20/06/2026 / CVE, CWE-862, Security Research

The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…

ApplicationThe WP DSGVO Tools (GDPR) plugin for WordPress
TypeSoftware weakness
Read post
CVE-2026-12569: A critical remote code execution (RCE) vulnerability h
19/06/2026 / CVE, CWE-20, Security Research

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The…

ApplicationPTC Windchill PDMlink
TypeSoftware weakness
Read post
CVE-2026-10023: Dokan: AI Powered WooCommerce Multivendor Marketplace
19/06/2026 / CVE, CWE-639, Security Research

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for…

Applicationall
TypeIDOR access control flaw
Read post
CVE-2026-12407: E2Pdf – Export Pdf Tool for WordPress plugin for WordP
19/06/2026 / CVE, CWE-862, Security Research

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up…

ApplicationThe E2Pdf – Export Pdf Tool for WordPress plugin for WordPress
TypeSoftware weakness
Read post
CVE-2026-12505: A flaw was found in the cifs-utils package where the c
19/06/2026 / CVE, CWE-250, Security Research

A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges…

Applicationthe cifs-utils package
TypeSoftware weakness
Read post
CVE-2026-10029: Event Koi Lite – Events Calendar, Event Management, RS
19/06/2026 / CVE, CWE-862, Security Research

The Event Koi Lite – Events Calendar, Event Management, RSVP, and Tickets plugin for WordPress is vulnerable to…

ApplicationThe Event Koi Lite – Events Calendar
TypeSoftware weakness
Read post
CVE-2024-31435: : Missing Authorization vulnerability in Inisev Social
19/06/2026 / CVE, CWE-862, Security Research

: Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured…

ApplicationInisev Social Media & Share Icons
TypeSoftware weakness
Read post
CVE-2024-32729: Improper Limitation of a Pathname to a Restricted Dire
19/06/2026 / CVE, CWE-22, Security Research

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud…

ApplicationQuantumCloud Conversational Forms for ChatBot
TypePath traversal
Read post
CVE-2024-32949: Missing Authorization vulnerability in Prince Integrat
19/06/2026 / CVE, CWE-862, Security Research

Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly Configured Access…

ApplicationMissing Authorization vulnerability in Prince Integrate Google Drive
TypeSoftware weakness
Read post
CVE-2024-33685: Missing Authorization vulnerability in Jegstudio Start
19/06/2026 / CVE, CWE-862, Security Research

Missing Authorization vulnerability in Jegstudio Startupzy startupzy allows Exploiting Incorrectly Configured Access…

ApplicationMissing Authorization vulnerability in Jegstudio Startupzy startupzy
TypeSoftware weakness
Read post
CVE-2026-35263: Vulnerability in the WebLogic Server product of Oracle
19/06/2026 / CVE, CWE-284, Security Research

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core)

Applicationoracle weblogic server
TypeAccess control vulnerability
Read post
CVE-2026-12348: Address bar spoofing in Arc Search for Android allows
18/06/2026 / CVE, CWE-1021, Security Research

Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain in the address bar…

ApplicationAddress bar spoofing in Arc Search for Android
TypeSoftware weakness
Read post
CVE-2026-35258: Vulnerability in the WebLogic Server product of Oracle
18/06/2026 / CVE, CWE-601, Security Research

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console)

Applicationoracle weblogic server
TypeSoftware weakness
Read post
Contact

Let's talk.

Whether you're evaluating the platform, exploring a partnership, or have a security research inquiry, we'd love to hear from you.

hello@vesamuni.com
Melbourne, VIC, Australia
Colombo, Sri Lanka
Response within 24 hours
Required.
Valid email required.
Required.
System Status

Operational Status

Website and client dashboard online

Checked when this page loaded. For anything urgent, email hello@vesamuni.com.

WebsiteOnline
Client sign-in & dashboardOnline
CVE research feed no posts yet Delayed
Takedowns separate servicetakedowns.vesamuni.com ↗
AI Guided Pentesting Platform

AI Guided Pentesting
that never stops.

Continuous security testing priced by protected asset, not by scan. Run unlimited rescans, monitor new CVEs, and use monthly AI pentest credits for deeper validation.

Monthly subscriptions. Cancel or change plan from the billing portal.

Network Security
Scout
$79/mo
per month

Network vulnerability assessment, attack surface discovery, cloud checks, and continuous CVE monitoring for small security teams.

Scanning & Testing
  • 5 protected assets with unlimited scans and rescans during each monthly cycle
  • 1 AI pentest scan / month — AI-guided penetration test targeting your highest-risk external asset
  • Full NVD database access — real-time CVE matching against your installed plugins, themes & core version
  • OWASP Top 10 coverage with severity scoring (Critical → Info)
Intelligence & Monitoring
  • NVD-backed plugin & theme vulnerability detection
  • WordPress core version security tracking
  • SSL/TLS certificate monitoring
  • Outdated software & end-of-life component alerts
Reporting
  • Basic reports — scan summary with findings, severity, and remediation steps
  • PDF export of scan results
  • Dashboard access — single-site view
Support
  • Email support
  • Vesamuni knowledge base access
Most Popular
Web, API & Network
Sentinel
$149/mo
per month

AI-guided security with unlimited automated scans. Broader coverage across your full web presence with weekly reporting and real-time CVE alerting.

Scanning & Testing
  • 5 protected assets with unlimited vulnerability scans and rescans
  • 3 AI pentest scans / month — AI-guided penetration testing with intelligent attack path discovery
  • Full NVD/CVE monitoring — real-time matching against your tech stack
  • Web application scanning — beyond WordPress, covers any web-facing asset
  • OWASP Top 10 + CWE coverage with AI-validated findings
Intelligence & Monitoring
  • NVD/CVE monitoring — continuous tracking of new vulnerabilities affecting your stack
  • Real-time CVE alerting via email alerts
  • Attack surface enumeration — subdomain & exposed service discovery
  • SSL/TLS, DNS & domain expiry monitoring
  • Technology fingerprinting & version detection
Reporting
  • Weekly reports — executive summary with risk trends, new findings & remediation progress
  • Severity-prioritised remediation guidance
  • PDF & dashboard export
  • Multi-asset dashboard view
Support
  • Email alerts — instant notification on critical & high findings
  • Priority email support
  • Vesamuni knowledge base access
Full-cycle Pentesting
Vanguard
$249/mo
per month

Deep vulnerability testing and reporting with the highest self-service AI pentest allowance, continuous asset monitoring, and configurable exports.

Scanning & Testing
  • 5 protected assets with unlimited vulnerability scans and rescans
  • 10 AI pentest scans / month — deep AI-guided penetration testing with multi-vector attack simulation
  • Real-time NVD/CVE alerts — instant notification when new vulnerabilities affect your environment
  • Full web application, API & infrastructure scanning
  • AI-driven false positive elimination with proof-of-exploit validation
  • On-demand re-scans after remediation (unlimited)
Intelligence & Monitoring
  • Continuous dashboard visibility into monitored assets and findings
  • Continuous attack surface discovery & asset enumeration
  • Threat intelligence feed — CVE tracking + emerging threat advisories
  • Technology stack fingerprinting & change detection
  • SSL/TLS, DNS, domain & certificate transparency monitoring
Reporting & API
  • Custom reports — configurable report templates with branding, scope & audience controls
  • API access — REST API for scan orchestration, results & webhooks, included when it launches Planned
  • Priority remediation guidance — risk-ranked action items with context & fix recommendations
  • Compliance alignment mapping (ISO 27001, SOC 2, PCI-DSS indicators) Planned
  • Risk trend dashboards with historical comparison
  • PDF, CSV & JSON export
Support
  • Priority email + chat support
  • Dedicated onboarding & configuration assistance
  • Vesamuni Threat Advisory bulletins
  • Early access to new platform features
Custom Platform Plan
Enterprise
Custom
tailored to your environment

A custom software plan for larger asset inventories, additional testing capacity, tailored scan schedules, and product onboarding. Scope and limits are agreed before activation.

Scanning & Testing
  • Custom protected asset allowance based on your scope
  • Unlimited automated rescans across included assets
  • Custom monthly AI pentest credit allowance
  • Web application, API, infrastructure, WordPress, SSL/TLS, and cloud checks
  • Configurable scheduled scans and finding notifications
  • AI-assisted finding review and remediation guidance
  • Custom scan profiles for industry-specific threat models
Monitoring & Workflow
  • Continuous attack surface discovery and risk scoring
  • Email alerts for new critical and high-severity findings
  • Scan history and risk trend comparison
  • Webhook-based workflow integration Planned
Reporting & API
  • Custom reports with configurable templates and structured output
  • Full REST API access Planned
  • Compliance control mapping indicators for supported frameworks Planned
  • Executive risk summaries and historical trend reporting
  • PDF, CSV, and JSON exports
Product Support
  • Priority email support during published business hours
  • Remote onboarding and configuration assistance
  • Product feedback and roadmap sessions
  • Early access to all new Vesamuni modules & features
At a glance

Side-by-side comparison
across all tiers.

Scout Sentinel Vanguard Enterprise
Price $79/mo $149/mo $249/mo Custom
Protected Assets 5 assets 5 assets 5 assets Unlimited
Scans & Rescans Unlimited Unlimited Unlimited Unlimited
AI Pentest Scans / mo 1 3 10 Unlimited
NVD Database Access ✓ ✓ ✓ ✓
NVD/CVE Monitoring — ✓ Real-time Real-time
Reports Basic Weekly Custom Custom + Board-ready
Email Alerts — ✓ Real-time Real-time
API Access — — Planned Planned
Remediation Guidance Basic Prioritised Priority + Context Priority + Context
Attack Surface Discovery — ✓ Continuous Full ASM
Web App Scanning WordPress Any web asset Full stack Full stack + API + Cloud
Compliance Mapping — — Planned Planned
Custom Report Templates — — ✓ ✓
Pricing Notes
Transparent Monthly Billing

Pay month to month in USD. Change or cancel through Stripe's secure billing portal.

Asset-based Allowances

Plans limit unique protected assets, not scans. Rescan covered assets as often as needed.

Researchers & Non-profits

Introductory rates for independent security researchers, academic institutions, and registered non-profits. Reach out and mention your organisation type.

Upgrades

Start on any tier and upgrade at any time. Your scan history, configurations, and discovered assets carry over seamlessly.

Enterprise

Custom software plan for larger asset allowances, additional testing credits, tailored scan schedules, onboarding, and priority product support.

Ready to see
everything?

Not sure which plan fits? Tell us what you need to protect and we will recommend one, or scope a custom plan.

Protected Workspace

Security Dashboard

Monitor your subscription, protected perimeter, and account security.

Plan Checking... Loading billing status
Protected Assets 0 / 0 No perimeter configured
Account Security Checking... Reviewing controls
Subscription Renewal Not scheduled Managed securely by Stripe
Protected Perimeter

Primary monitored asset

Pending setup

HTTPS is recommended. Private network and local addresses are rejected.

Credentials

Change password

At least 12 characters Passwords match Different from current password

Changing your password invalidates every other active session.

🐸