Cyentrix

Console sign in

Access your organisations from anywhere
New to Cyentrix? Create an account

Create your account

Free 7-day trial · scan up to 5 IPs · no card
Already have an account? Sign in
Want a walkthrough first? Request a demo
© Cyentrix · secured connection
Cyentrix
· User manual · Sign out

Dashboard

Your organisations
Subscription
ModuleAccessTier
Billing & plan
Security · Two-factor authentication off

Protect your console login with an authenticator app (Google Authenticator, Authy, 1Password…).

Add this secret to your authenticator, then enter a code to confirm:

        
        
        
      
2FA enabled
On-prem node Download installer

Prefer to run the scanner on your own hardware? Download and install it, then click Enroll a node below and connect it from its Settings → Cloud console. On-prem nodes are still activated and licence-limited from here.

Nodes
On the node's own console: Settings → Cloud console, paste these:

    
NodeVersionStatusLast seen
No nodes enrolled yet. Click "Enroll a node".
Scans

Scans run on your on-prem node — never in the cloud. Start a scan from the node; it appears here to track and, once complete, to download as a PDF report.

NodeTargetStatusProgressFindings
No scans yet. Pick a node above and start one.
Cyentrix
← Back to console

Cyentrix Scan — User Manual

Everything you need to set up a node, run scans, and act on findings. Scanning always runs on your own node; the console only queues work and shows results.

Contents
1. How it fits together 2. Create your account 3. Install a node 4. Connect the node 5. Run a scan 6. Findings & remediation 7. Reports 8. Billing & trial 9. Two-factor auth 10. Get help

1. How it fits together

Cyentrix Scan has two parts. The node is a single program you run on a machine inside your network — it does all the scanning. The console (this site) is where you create scans and read results from anywhere. The node only ever makes an outbound HTTPS connection to the console, so there are no inbound ports to open and your data never leaves your network.

Consolecontrol plane Your noderuns the scans Your networkhosts & services outbound HTTPS scans

2. Create your account

  1. On the console sign-in screen, choose Create an account.
  2. Enter your work email, company (optional) and a password of at least 8 characters, then Start free trial.
  3. You are signed straight in. New accounts start on a 7-day free trial that lets you scan up to 5 IPs — no card required.
console.cyentrix.com
Create your account
Free 7-day trial · 5 IPs · no card
Work email
you@company.com
Company (optional)
Acme Ltd
Password
••••••••
Start free trial →
The console sign-in screen, “Create an account” form.

3. Install a node

The node is one self-contained binary — no dependencies. Put it on a machine that can reach the systems you want to scan.

Windows

Run the installer (or the binary) on a Windows host, for example:

C:\Program Files\Cyentrix\cyentrix.exe -addr 0.0.0.0:8834

Linux

chmod +x cyentrix ./cyentrix -addr 0.0.0.0:8834
The node makes only outbound connections to the console. You do not need to expose port 8834 to the internet — it is for the local node UI.
node · inside your network
$ ./cyentrix -addr 0.0.0.0:8834 [cyentrix] node starting… v1.0.3 [cyentrix] enrolled OK · org: Acme Ltd [cyentrix] connected to console (outbound HTTPS) [cyentrix] status: ONLINE · waiting for scan jobs
The node running on your machine — enrolled, connected, online.

4. Connect the node to your account

1
In the console, open Nodes → Add a node to generate a one-time enrollment token.
2
Give the token to the node when prompted (or via the enrollment command the console shows). The node signs itself in over HTTPS.
3
Within a few seconds the node appears in your console under Nodes, marked online. You can rename it to something memorable.
console.cyentrix.com
Your nodes
NameStatusVersionLast seen
HQ-scanneronline1.0.3just now
branch-01online1.0.32 min ago
The Nodes list with an enrolled, online node.

5. Run a scan

  1. From the dashboard, choose New scan.
  2. Pick the node that should run it (the one nearest the targets).
  3. Enter your targets — an IP, a range, a CIDR (e.g. 10.0.0.0/24), or hostnames.
  4. Choose the depth. Add SSH / WinRM credentials for authenticated checks and enable compliance if you want benchmark results too.
  5. Start the scan. Progress streams live; you can cancel at any time.
Billing counts unique IPs assessed per month. Re-scanning the same hosts is free and does not use more of your allowance.
console.cyentrix.com
New scan
Node
HQ-scanner ▾
Targets
10.0.0.0/24
☑ Credentialed (SSH/WinRM) ☑ Compliance
Start scan →
Scan · 10.0.0.0/24  running
62% · 148/240 hosts · 17 findings so far · Cancel
Creating a scan, and a scan running (cancel any time).

6. Findings & remediation

When a scan finishes, open it to see findings ranked by real risk — exploited-in-the-wild (CISA KEV) first, then high EPSS, then the rest.

  • Click any finding for the drill-down: affected host, evidence, severity, CVE/KEV/EPSS, and step-by-step remediation guidance — what to patch or reconfigure, and why.
  • First/last seen history tells you whether a finding is new or recurring.
  • Fix the issue, then re-scan to confirm it is resolved and watch your risk score fall.
console.cyentrix.com
CVE-2024-3400 · GlobalProtect command injection
CRITICAL
Host10.0.14.22
ExploitCISA KEV · EPSS 97
First seentoday
Remediation
Upgrade PAN-OS to a fixed release (11.1.2-h3 or later) and rotate any credentials that may have been exposed. Re-scan to confirm the fix.
A finding opened — severity, KEV/EPSS, and step-by-step remediation.

7. Reports

From a completed scan, choose Report to generate a clean PDF — an executive summary plus the full findings with remediation. The PDF is produced on the node, so nothing leaves your network unless you choose to share it.

scan-report.pdf
CYENTRIX · Scan Report10.0.0.0/24
Summary — 240 hosts · 17 findings · risk 82/100
2 Critical5 High10 Other
CVE-2024-3400 — GlobalProtect RCE (KEV) · 10.0.14.22
CVE-2021-44228 — Log4Shell · 10.0.9.7
TLS — expired cert + weak ciphers · 3 hosts
A generated PDF report — executive summary plus findings and remediation.

8. Billing & trial

Your plan and usage live in the Billing & plan card on the dashboard.

  • The trial gives you 5 IPs for 7 days. When you are ready, upgrade to Starter, Growth or Ultimate — you keep your node, scans and history.
  • Payment is handled securely via Ziina (AED). Choose monthly or annual; annual includes 2 months free and the Recon add-on.
  • Need more IPs mid-month? Top up any time without changing plan.
console.cyentrix.com
Billing & plan
Current: Trial · 3 of 5 IPs used · 5 days left
Starter · $29Growth · $59Professional · $149
Monthly / annual · pay securely via Ziina
The Billing & plan card — trial usage and upgrade options.

9. Two-factor authentication

Protect your login: open the Security · Two-factor authentication card, choose Enable 2FA, scan the QR/secret with an authenticator app (Google Authenticator, Authy, 1Password…), and confirm with a code. After that, sign-in asks for a 6-digit code.

console.cyentrix.com
Security · Two-factor authentication
off
Scan with your authenticator app, then confirm with a code.
6-digit code
Enable 2FA
The 2FA setup card — scan the QR with an authenticator app.

10. Get help

Prefer a walkthrough, or stuck on setup? Request a demo or email hello@cyentrix.com.

© Cyentrix · your data and scans never leave your network.
Findings