Find what’s affected. Prove what’s fixed.
Arcturiq turns vulnerability scanning into decisions, for every server and every endpoint: whether it is affected, why, and the evidence behind it.
Full features launching soonAn example estate. Each mark is a device, and Arcturiq gives every one a decision: affected, not affected, or not checked.
Two ways in, one decision.
By sensor
An office network with servers
A sensor in each zone
One sensor runs in each network zone, on a Linux host you provide.
It looks over SSH
A small kit installed once gives it a restricted login and a fixed list of commands.
By agent
Laptops, remote staff and Windows servers
An agent on each device
An efficient agent on each Windows or Linux laptop or desktop, and on Windows servers.
It reports for itself
It looks only at its own device and connects outbound, so it works wherever the device is.
Both
Many organisations use both.
Signed at the source
Every result is signed before it leaves the sensor or the device.
Arcturiq decides
Every vulnerability, on every server, endpoint and service, gets a decision.
You see why
Each decision shows its reason and the evidence behind it.
| Device | Status | Kind | Status Reason | Installed | Running |
|---|---|---|---|---|---|
| web-01sshd · port 22 | AffectedNeeds restart | Server | Needs restart | 3.0.13 | 3.0.11 |
Decisions, not lists. Evidence, not guesses.
| Device | Status | Kind | Status Reason | Installed | Running |
|---|---|---|---|---|---|
| web-01sshd · port 22 | AffectedNeeds restart | Server | Needs restart | 3.0.13 | 3.0.11 |
| laptop-07libssl3 package | Not affectedFixed version installed | Endpoint | Fixed version installed | 3.0.13 | – |
| db-02192.0.2.27 | Not checkedDevice did not answer | Server | Device did not answer | – | – |
Proof of fix
A fix counts only when the file a service is running is the fixed one.
Not checked, never guessed
Nothing is reported clean without evidence. A device that stops reporting reads Not checked, not clean.
Fresh decisions
When advisory data changes, decisions are made again without waiting for the next scan.
One set of decisions
Servers and endpoints are decided the same way, from the same kind of evidence.
Vendor statements
Reads vendors’ VEX and CSAF “not affected” statements, and shows which one a decision rests on.
Exposure paths
From the internet, to a service, to the vulnerable package.
AI that explains
It explains a decision from its stored evidence. It never makes one.
Published accuracy
We will publish how accurately Arcturiq decides, and how that is measured.
Security you can check.
Report a vulnerability
Email security@mitiglane.com. The disclosure policy says what happens next.
Policy: https://mitiglane.com/security/disclosure/security.txt
/.well-known/security.txt gives the same contact, for tools that look for it.
Contact: mailto:security@mitiglane.comNo tracking
No cookies, no analytics and no third-party scripts. Everything this site needs is served from it.
Hear when Arcturiq launches
Send one email and we will write to you when Arcturiq launches. We use your address for that and nothing else.