Security Posture
Know how exposed you are before an attacker does
Security Posture brings four views together: Endpoint Posture, Network Discovery, Applications & AI usage and your External Surface. Each one shows what was checked, what needs attention and how to fix it.
Security posture
Vulnerabilities
Endpoint & network
Configuration checks and every device your endpoints can see
Applications & AI usage
What is installed, what connects out and which AI tools are in use
External Surface
What answers from the internet on your domain
The problem
You cannot protect what you cannot see
Settings drift silently
Firewalls get switched off, Defender protections get disabled and admin rights spread, and nobody notices until an incident.
Endpoint Posture checks every Windows and Linux machine regularly and flags what changed.
Unmanaged devices and shadow AI
Computers without protection and AI tools installed by staff create entry points and data leaks outside your control.
Network Discovery finds devices with no agent, and Applications & AI usage shows which AI tools are in use.
Your internet-facing side is unknown
Exposed services, weak certificates and missing email protection are the first things attackers probe.
External Surface checks your domain from outside and explains how to fix each issue.
01
Endpoint Posture
Every Windows and Linux endpoint reports its own configuration on a regular schedule. AIShieldNet checks it against good practice and shows what needs attention, machine by machine and across the fleet.
Operating system & patching
Edition, release, kernel and patch level, when updates last installed, fixes waiting to install and whether unattended upgrades are on.
Antivirus & Microsoft Defender
Real-time protection, tamper protection, antispyware, download protection and which antivirus product is registered.
Firewall
Firewall state for the domain, private and public profiles.
Disk encryption & boot integrity
Encrypted volumes, Secure Boot and whether a TPM is present, enabled and which version.
Privilege
Local administrators, User Account Control, accounts that can become root and sudo without a password.
Remote access
Remote Desktop, SSH server, root login and password authentication.
Logging & legacy protocols
Whether Sysmon or auditd is running, and whether SMBv1 is still installed.
Exploited software on each machine
Known exploited vulnerabilities, including inside container images and WSL, software used in ransomware and fixable critical or high issues.
Reports & export
A fleet Endpoint Posture report and CSV export, with findings by severity for every machine.
FIN-LT-07 · Windows
Real-time protection
Microsoft Defender
Tamper protection
Microsoft Defender
Disk encryption
System volume
Secure Boot
Boot integrity
Local administrators
Privilege
Remote Desktop
Remote access
SMBv1 installed
Legacy protocol
02
Network Discovery
AIShieldNet finds the devices on the networks your endpoints connect to, so nothing on your network goes unnoticed.
Every device your endpoints can see
One view of the devices on your networks, including ones you did not know about.
Find computers with no agent
Devices are grouped: matched to a managed machine, computers with no agent, phones, routers and virtual adapters, unidentified, or no longer answering.
Map of your networks
See each network, the devices on it and which of your machines can reach them.
What it connects to
Destinations are checked against known-bad threat intelligence, with candidates to check for command-and-control.
Search & export
Search by name, address or hardware address, and export the device list.
Devices found
FIN-LT-07
Matched to a machine you manage
192.168.10.44
Computer with no agent
Office printer
Phones, routers & virtual adapters
Unknown device
Could not tell what it is
192.168.10.51
Not answering any more
03
Applications & AI usage
Know what is installed and what is actually in use, including AI tools that no installer records.
Installed and in use
See what is installed and what is actually being used across your machines.
Applications by category
Every recognised application grouped by category, with the machines using it and when it was first and last seen.
AI tools, including command-line agents
Desktop AI assistants, AI coding tools and command-line AI agents, including ones no installer records.
In use but not installed
Applications that connect out with no install entry, and the process holding the connection.
Filterable export
Export the applications table in a format you can filter.
Applications by category
AI assistant (desktop)
4 machines · first seen this week
Command-line AI agent
Not in the software list
Remote access tool
No install entry
File sharing service
Seen by Web Protection
04
External Surface
AIShieldNet checks your domain from the outside, the way an attacker would, and explains each issue with how to fix it.
Published hosts
The hosts published for your domain and the addresses behind them.
Exposed services
What answers from the internet on each address, and what sits in front of it.
TLS & transport security
Certificate health and how securely your sites accept connections.
Security headers
Missing or weak security headers on your web servers.
Email authentication
Whether your domain is protected against email spoofing.
External posture report
Scope and method, findings by area, what needs a decision and what could not be checked.
example.com
Published hosts
Hosts found for the domain
Exposed services
What answers on each address
TLS certificate
Expiry and chain
Security headers
Web server responses
Email authentication
Sender protection records
Domain registration
Registration details
05
Findings & decisions
Posture findings are tracked to an outcome, not just listed.
Exploited and ransomware-linked software
Software listed in the CISA Known Exploited Vulnerabilities catalogue, with the required action and remediation due date.
Signs of compromise
Machines reaching known-bad destinations and programs that unexpectedly go online.
Assign and accept
Assign an owner, or accept a finding with a reason and a date to review it again.
Clear evidence
Each finding shows why it was raised and what to do about it.
Closes itself when fixed
Findings close automatically when a machine is no longer affected or the package is removed.
Needs attention
Exploited software
Known exploited · required action
Used in ransomware
Machines affected
Known-bad destination
Compromised host?
Unexpected program online
Needs a decision
Legacy protocol enabled
Review again on a set date
AIShieldNet
Why posture matters
01
Most breaches use weaknesses that were already visible: missing patches, open services, weak settings.
02
Unmanaged devices on your network are blind spots for every other control.
03
Unapproved applications and AI tools move data outside your oversight.
04
Your external surface is what attackers see first.
See AIShieldNet on your endpoints
Walk through detection, investigation and exposure management with our team, using your own environment.
