Scanning

Simple vs Advanced mode

Simple mode is the zero-config path: pick a Network or Internal preset and go. Advanced mode exposes the full toolchain — choose which scanners run, tune per-tool options, and save the combination as a reusable routing plan.

Scan presets

• Discovery — host discovery and port mapping only, no vulnerability checks
• Quick — discovery plus fast checks on the most common exposures
• Full — discovery plus the complete scanner suite for the plan

Chained scan workflows

Vertix Radar runs first — discovering live hosts, open ports, services, TLS identity and device types — then automatically routes targeted scanners (Nuclei, testssl.sh, ssh-audit, OpenVAS, Trivy, ZAP) to matching endpoints. Findings from every scanner normalize into one schema and deduplicate onto stable asset identities (MAC, SSH host key, FQDN, IP), so DHCP churn doesn't create phantom assets.

Scheduling and resilience

• Scheduled scans per agent, per asset, or org-wide — daily, weekly or monthly
• Agents queue results to disk when offline and sync on reconnect
• OpenVAS tasks recover automatically after a reconnect
• max_concurrent_scans is tunable in agent.yaml (default: 3)