Investigate and prioritize
Fix what attackers can reach first
Focus on exposed services and actively exploited flaws; automate the rest.
ExposureRDP port open to the internet: what to check first
A practical response to port 3389 or a custom port that appears to serve Remote Desktop.
Reading a reportSeveral hostnames, one IP address: how to read a security scan
Separate name-based website checks from shared public IP and port observations.
RemediationOne security fix can address several findings: how to group the work
Group findings by underlying control, then verify each affected asset after the change.
Reading a reportWhy configuration can drift after an update or hardware change
A change can reopen a port or alter TLS, DNS or headers. Check what changed and verify the fix.
Make the change and keep watch
A 20-minute weekly security review for a small IT team
Review changes, assign one owner, and record verification without drowning in alerts.
Choosing coverageExternal vs. internal security scans: what each can see
A public domain scan and an inside-network scan answer different questions.
RemediationMissing security headers: a safe fix plan for a small website
Find the response owner, stage the change, and verify the actual browser-facing headers.
Getting started and reference
Verify your domain for Torva Edge
Prove domain control with a DNS TXT record.
How-to, CoreSet up Torva Core
Install the inside-network agent and approve network ranges.
How-to, FixesFix common security issues
Practical steps for TLS, HSTS, DMARC, RDP and more.
GuideScan vs. penetration test
Which questions a scan answers and when hands-on testing helps.
GuideWhat is DMARC?
Set up monitoring before tightening an email policy.
Want to check your domain? Try the free instant check. It reads public DNS, certificate and header information. See what paid scans cover.