Akadenia SecurityAkadenia Security
Sign in

Getting started

Sign up, create your organization, add your first domain and see its first findings.

Akadenia Security scans the hosts and domains you own from the outside, the way an attacker sees them, on a schedule you choose. Each scan's results become findings you can triage, with what to fix and how.

Sign up

  1. Go to security.akadenia.com and choose Get started.
  2. Sign up with Google or an email and password, then confirm your email address from the message you receive. No message? Check your spam folder, or choose Resend link once you're signed in.
  3. You get in in one of three ways:
    • An invitation: opening the link in an invitation email adds you to that organization with the role it names.
    • Your company's domain: if your verified email belongs to a domain an organization has claimed, you join it.
    • A new organization: otherwise you create your own. New sign-ups may wait for a short approval first; you get an email when you're in.

Create your organization

An organization holds your targets, schedules, findings and members. Give it your company's name; you can add a logo later under Organization → Settings. You're its owner.

If you belong to several organizations, switch between them from the menu under your name.

Add your first target

A target is a host or domain to scan: example.com, app.example.com, or an IP address. Adding one takes three steps:

  1. Add: open Targets → Add target, enter the domain or URL, and confirm you own it or are authorized to test it. Scanning something you don't control is not allowed. The target gets the next number in your organization (its links look like /targets/12), and is named after its host.
  2. Verify: prove you control it, by publishing a DNS record or by a code emailed to the domain's admin address. See Verifying domains. You can skip this for now; scans start once it's done.
  3. Scanners: rename the target if you like, pick the scanners and how often each runs, and finish.

A target you left unverified opens on step 2 again from Set up in the targets list.

Add your domain itself first (example.com): it's where the lookalike, subdomain and email checks run, and once it's verified, its subdomains are verified through it.

Choose what to scan

Step 3, and later the target's Scans page, picks the scanners to run and how often. Each schedule runs once right away, or as soon as the target is verified, so the first findings don't wait a week. After that it runs at a quiet time, spread out so scans don't pile up. You can change times under Schedules. See Scanners and schedules.

On a paid plan, Scan now on the target's overview runs any scanner right away.

Read the results

The target's overview sums up its findings by severity and shows a section per topic: lookalike domains, subdomains, email security, TLS, open ports, the web application and SSH. Findings lists everything to act on, worst first, with how to fix each one. See Triaging findings.

Get alerts

Under Alerts, choose who gets an email when a scan finds something new or something is fixed, and whether it's after each scan or a daily or weekly digest. Alerts can also go to Slack, after each scan or as the same digest. Findings can become tickets in GitHub or Linear on the Tickets page, and signed webhooks live on the Webhooks page.

Next steps