 is a cloud-based solution which does not require a client install.  The latest live version is always available to all users and we do not publish the version in the user view. 

I've accepted an invite, why can't I see anything?

What version is Hexiosec ASM?

EPSS

Which SSO protocols does ASM support?

Hexiosec ASM

Hexiosec ASM (Public)

Organisation and Group Roles

Using Groups

MFA and session expiry

Password Policy

Changing email address

Changing ownership

User and Group Management

Scan Types

Scan Allowances

Seeds and IPs

Scan Limiting

Deleting Scans

Scan Notifications

Managing Scans

Report Terminology

Scan Reports

Health Scores

Managing Actions

EPSS Scoring of Risks

TLS Certificate Risks

Backport Resolvable Risks

Risk Severity Ratings

SPF Hard Fail risks

Managing Risks

Managing Domains and IPs

Graph view

Managing CDNs and Shared IPs

Cloud Asset Discovery

Exporting Scan Results from the ASM API

Link Changes Endpoint

Creating a scan using the API

Paginating the API Requests

Managing API Keys

Using the Public API

Hexiosec ASM mobile

Upgrade Recommendations

Contacting Support

Hexiosec ASM User Guides

What is the 'Update pending' notification?

Which domains need security.txt files?

Why is my IP's geographic location not showing, or incorrect?

What are primary and secondary assets?

What is a Stale domain?

Does ASM validate the DKIM public key?

Why do I have a risk against client-side React?

I don't think this vulnerability applies to me?

I've fixed a risk, why has it not been resolved?

Will Hexiosec ASM find Malware?

Will the latest CVE be found?

Can I run scans without permission?

Why are secondary assets included in my IP/domain count?

Frequently Asked Questions

MSP Specific Guidance