Hadrian

What it is

A cloud service with two parts: Atlas keeps a live inventory of internet-facing assets and probes them around the clock, while Nova runs agent-driven penetration tests on one chosen web app or API.

What it helps with

- Discovering domains, DNS records, IPs, certificates, and cloud assets an organization exposes
- Flagging credentials leaked through infostealer malware
- Retesting automatically when a new subdomain, open port, or CVE appears
- Sending verified findings into existing ticketing, chat, and SIEM tools

Who it's for

Security, vulnerability management, and red teams testing internet-facing assets their organization owns or is authorized to assess.

Worth knowing

Passive discovery runs every hour, and most Nova tests finish within 24 to 48 hours with a PDF report mapped to SOC 2, ISO 27001, and NIS2.

Does it only check known CVE versions?
No, its agents reason about application behavior and chain weaknesses before attempting exploitation.

Do Atlas and Nova share data?
Yes, assets Atlas discovers become Nova's scope, and Nova keeps its reasoning plus every request and response as evidence.

Is any of it open source?
The platform is closed source, but the company publishes separate research utilities on GitHub, such as an AI code review workspace.