A42 is an automated cybersecurity platform that continuously monitors your company's external digital perimeter. It discovers all subdomains (including shadow assets), detects exploitable vulnerabilities, monitors the dark web for leaked credentials, and delivers bi-weekly security reports without manual intervention.

How often does A42 scan my assets?

A42 performs automated bi-weekly scans of all your assets with scheduled recursive scanning — no manual input required from your security team.

What is external perimeter monitoring?

External perimeter monitoring is the practice of continuously scanning all internet-facing assets of your company — domains, subdomains, IPs, and exposed services — to detect vulnerabilities before attackers exploit them. A42 automates this, discovering even shadow assets your team may not know about.

Does A42 detect leaked credentials on the dark web?

Yes. A42's Dark Web Monitoring scans dark web sources for leaked credentials and sensitive data linked to your domain shared in illicit databases, helping you respond before attackers exploit the information.

A42 is used by IT security teams, DevOps engineers, CTOs, and business owners. Clients include Jooble (international job platform, 67 countries), DOT (Ukrainian government agency supporting the Armed Forces), fintech companies, and e-commerce platforms.

How is A42 different from traditional scanners like Tenable?

Unlike Tenable, which requires manual configuration of scan targets, A42 automatically discovers all subdomains and exposed services — including ones never added to a scan scope. A42 detects exploitable vulnerabilities, not just alerts, reducing noise and focusing on real risks.

A42 is a Ukrainian company (A42, LLC, reg. №45790296), headquartered at 17 Hlybochytska str., Kyiv, Ukraine, 04052. The team has deep expertise in offensive security and cyber defense, with government and NATO partnerships.

Start Your AI Pentest

General Information

Company name

Contact person

Email

Application URL(s)

Industry

Application Scope

Number of domains

Number of subdomains

API endpoints / routes (approx.)

Number of user roles

Which roles?

Anonymous (unauthenticated) Regular user Manager / Moderator Admin Super Admin / Owner Other

Testing Type & Technical Details

Testing type

Black Box — no credentials, external attacker simulation Grey Box — test accounts provided (recommended) White Box — source code access + credentials + docs

Technology stack (if known)

API docs available? (Swagger, Postman...)

Testing environment

Production Staging Dedicated test environment

Additional Requirements

Retest after fixes (within 30 days) Compliance mapping (PCI DSS / ISO 27001 / SOC 2) Results presentation (video call) NDA required

Desired start date

Deadline (if any)

Has a pentest been done before?

Notes / special requirements