03 / THE SECURITY ENGINE

Built to Look Deeper.

AURIX SHIELD combines specialized security engines to discover, analyze, and validate security issues with evidence.

Native Security Analysis
Native Security Analysis
TIER // DISCOVER
Native Security Analysis
WEB / RUNTIME•DISCOVER

Native Security Analysis

Native application-level security analysis performed directly by AURIX SHIELD.

PROVIDER / OWNERSHIP
AURIX SHIELD — Native
LICENSE
Proprietary / AURIX SHIELD
INSIDE AURIX SHIELD // PIPELINE EXECUTION FLOW
Target
→
Native Discovery
→
Observable Posture Assessment
→
Baseline Evidence
→
External Engine Correlation
ENGINE OVERVIEW

AURIX SHIELD's native security analysis evaluates the target's observable security posture before and alongside external security engines.

ANALYSIS & CAPABILITY DOMAINS
  • —Transport Security: TLS inspection, insecure transport, redirects, mixed content & cache behavior
  • —HTTP Security Headers: HSTS presence & strength, CSP presence & permissiveness, Clickjacking protection, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP
  • —Cookie Security: Secure, HttpOnly, SameSite & contextual Domain / Path analysis
  • —Cross-Origin Security: Controlled Origin testing, credentials behavior, preflight behavior & contextual CORS analysis
  • —Information Exposure: Server/runtime disclosure, debug/error exposure, source maps, public configuration/environment exposure & directory listing
  • —Public Surface Discovery: HTML links, forms, scripts, styles, iframes, canonical URLs, metadata, robots.txt, sitemap, security.txt, API-looking routes & JS references
  • —Basic API Surface: API candidate discovery, API documentation paths, OpenAPI / Swagger detection, GraphQL detection, authentication indicators, CORS metadata & sensitive-output redaction
  • —Authentication Surface: Login/signup routes, route boundaries, API authentication indicators, session-cookie indicators & OAuth/OIDC indicators
AURIX VALUE // CONVERGENT INTELLIGENCE

The native layer establishes application security context and baseline evidence that can be correlated with the external engines.

OPERATIONAL BOUNDARY & EVIDENCE MODEL

This is currently an unauthenticated surface assessment. It does not perform full authenticated application testing and does not claim exhaustive vulnerability coverage.

AURIX SHIELD // SPECIFICATION & EVIDENCE MODEL“Specialized engines produce specialized evidence. AURIX SHIELD brings that evidence together into one security system.”
EVIDENCE CONVERGENCE

MORE ENGINESMORE EVIDENCEONE SECURITY SYSTEM

AURIX SHIELD does not depend on one scanner. Different engines inspect different layers of the attack surface. AURIX SHIELD brings those signals together, preserves the evidence, correlates findings, explains their significance, and supports verification and continuous security monitoring.