Prefer to run the scanner on your own hardware? Download and install it, then click Enroll a node below and connect it from its Settings → Cloud console. On-prem nodes are still activated and licence-limited from here.
Nodes
On the node's own console: Settings → Cloud console, paste these:
Node
Version
Status
Last seen
No nodes enrolled yet. Click "Enroll a node".
Scans
Scans run on your on-prem node — never in the cloud. Click a completed scan to download its PDF report.
Everything you need to set up a node, run scans, and act on findings. Scanning always runs on your own node; the console only queues work and shows results.
Cyentrix Scan has two parts. The node is a single program you run on a machine inside your network — it does all the scanning. The console (this site) is where you create scans and read results from anywhere. The node only ever makes an outbound HTTPS connection to the console, so there are no inbound ports to open and your data never leaves your network.
2. Create your account
On the console sign-in screen, choose Create an account.
Enter your work email, company (optional) and a password of at least 8 characters, then Start free trial.
You are signed straight in. New accounts start on a 7-day free trial that lets you scan up to 5 IPs — no card required.
Screenshot: the sign-in screen with the “Create an account” form.
3. Install a node
The node is one self-contained binary — no dependencies. Put it on a machine that can reach the systems you want to scan.
Windows
Run the installer (or the binary) on a Windows host, for example:
The node makes only outbound connections to the console. You do not need to expose port 8834 to the internet — it is for the local node UI.
Screenshot: the node running / its local status page.
4. Connect the node to your account
1
In the console, open Nodes → Add a node to generate a one-time enrollment token.
2
Give the token to the node when prompted (or via the enrollment command the console shows). The node signs itself in over HTTPS.
3
Within a few seconds the node appears in your console under Nodes, marked online. You can rename it to something memorable.
Screenshot: the Nodes list with an online node.
5. Run a scan
From the dashboard, choose New scan.
Pick the node that should run it (the one nearest the targets).
Enter your targets — an IP, a range, a CIDR (e.g. 10.0.0.0/24), or hostnames.
Choose the depth. Add SSH / WinRM credentials for authenticated checks and enable compliance if you want benchmark results too.
Start the scan. Progress streams live; you can cancel at any time.
Billing counts unique IPs assessed per month. Re-scanning the same hosts is free and does not use more of your allowance.
Screenshot: the New scan form and a scan in progress.
6. Findings & remediation
When a scan finishes, open it to see findings ranked by real risk — exploited-in-the-wild (CISA KEV) first, then high EPSS, then the rest.
Click any finding for the drill-down: affected host, evidence, severity, CVE/KEV/EPSS, and step-by-step remediation guidance — what to patch or reconfigure, and why.
First/last seen history tells you whether a finding is new or recurring.
Fix the issue, then re-scan to confirm it is resolved and watch your risk score fall.
Screenshot: a finding opened, showing severity and remediation steps.
7. Reports
From a completed scan, choose Report to generate a clean PDF — an executive summary plus the full findings with remediation. The PDF is produced on the node, so nothing leaves your network unless you choose to share it.
Screenshot: a generated PDF report.
8. Billing & trial
Your plan and usage live in the Billing & plan card on the dashboard.
The trial gives you 5 IPs for 7 days. When you are ready, upgrade to Starter, Growth or Ultimate — you keep your node, scans and history.
Payment is handled securely via Ziina (AED). Choose monthly or annual; annual includes 2 months free and the Recon add-on.
Need more IPs mid-month? Top up any time without changing plan.
Screenshot: the Billing & plan card with usage and upgrade options.
9. Two-factor authentication
Protect your login: open the Security · Two-factor authentication card, choose Enable 2FA, scan the QR/secret with an authenticator app (Google Authenticator, Authy, 1Password…), and confirm with a code. After that, sign-in asks for a 6-digit code.