Scattered signals
Exposed services, DNS and e-mail settings and certificate dates come from different tools and formats, for every customer separately.
Early-stage prototype · Belgium
External Security Monitoring & Reporting for IT Providers
Varnyxis is an early-stage project developing Varnyxis Exposure Monitor: proposed tools that help IT teams turn externally visible security observations into clearer customer reports and actionable follow-up — for assets their customers have authorized.
- Authorized assets only
- Passive, permitted data sources
- Clear about what is and isn’t verified
The challenge
Security observations are easy to collect and hard to turn into clear customer follow-up
IT providers who look after several small and medium-sized customers often handle external security signals in many places, by hand, customer by customer.
Reporting takes time
Translating technical output into something a business owner understands is repetitive work that is hard to bill.
Changes slip through
A port opened “temporarily” by a supplier, a certificate that expires, a policy reverted after a migration — changes are what often create risk.
Follow-up is hard to show
Customers want to see what was fixed, what is still open and what came back — not a new list of raw findings each time.
How Varnyxis Exposure Monitor is designed to work
From authorized assets to tracked remediation
Authorized Assets
Only domains and IP addresses your customer has authorized, after control is verified. Anything else is rejected before analysis.
Security Observations
Externally visible information from passive, permitted sources — no intrusive scanning, no log-in attempts.
Risk Triage
Transparent rules assign priority and confidence. Stale, conflicting or weak evidence is flagged, not overstated.
Customer Reports
A plain-language summary: what needs attention first, what was resolved, what is unchanged.
Remediation Tracking
Each finding is followed over time: new, resolved, or returned after remediation.
Core capabilities
What the Varnyxis Exposure Monitor prototype shows today, and what is still planned
- Demonstrated in synthetic lab works on fictional test data only
- Partially demonstrated core logic shown, workflow not built
- Planned not built yet
External exposure visibility
Classifies externally reachable services such as remote desktop, databases, SSH and web servers by review priority.
Today: rules evaluated on synthetic observations. Planned: a permitted, properly licensed live data source.
DNS and e-mail configuration
Checks for missing or invalid SPF records and missing or monitoring-only DMARC policies.
Planned: live DNS lookups, DKIM and deeper SPF checks.
TLS certificate monitoring
Flags expired or untrusted certificates and legacy TLS protocol versions.
Planned: live checks and advance expiry alerts.
Security change detection
Compares snapshots: new, resolved, returned or unchanged. A check that was not observed again is never reported as resolved.
Planned: scheduled monitoring and alerts.
Prioritized reports
Per-customer reports with priority, confidence and a plain-language summary that puts urgent items first.
Planned: Dutch and French versions, PDF and partner branding.
Remediation tracking
Finding status (open, resolved, reopened) derived from successive observations.
Planned: owners, due dates and a remediation history per customer.
Demonstration
Synthetic examples from Varnyxis Security Lab v1
Fictional data.
Organizations, IP addresses (documentation ranges) and domains (.example) are fictional. These are outputs of a synthetic laboratory, not real scan results, and nothing was requested from the internet to show them.
About the laboratory
- 20 synthetic scenarios across exposure, e-mail/DNS/TLS, software versions, ambiguity and change detection.
- 104 automated checks passed in a local test run on 8 November 2026; the same results were reproduced in a test run on the automation platform.
- Honest limit: the scenarios and the rules were written by the same team, so these results show internal consistency — not real-world detection accuracy. An independent review is pending.
Download synthetic customer report (PDF) · View laboratory scorecard (JSON) · View 20 synthetic results (JSON)
IT Partner Program
Built with IT providers, for IT providers
The Varnyxis partner program is in an early validation stage. We are looking for a small number of Belgian IT service providers to discuss their reporting work and give feedback on the prototype. There is no commitment and no pricing yet.
Early validation stageReduce repetitive reporting work
Consistent customer reports instead of rewriting technical output by hand.
Present observations clearly
Priority, confidence and limits stated plainly, so customers understand what matters first.
Support recurring monitoring services
Change tracking that can underpin a recurring service you offer your own customers.
Explore white-label collaboration
A possible future option to deliver reports under your own brand.
About Varnyxis
An early-stage cybersecurity automation project in Belgium
Varnyxis is an early-stage cybersecurity automation project developing external security monitoring and reporting for IT service providers. Its proposed service, Varnyxis Exposure Monitor, is in the prototype and validation phase: it is not yet a commercial service, the business has not yet been incorporated, and it has no customers. We publish what has been demonstrated and what has not.
- Authorized assets only. Assessment starts only after the asset owner has authorized it and control is verified.
- Passive and permitted. No exploitation, no password attempts, no intrusive scanning.
- Honest about limits. A software version linked to a CVE is reported as unverified, never as a confirmed vulnerability.
- Privacy by design. Only the data needed for the report; no tracking on this site.
- Human review. Customer communication is reviewed by a person before it is sent.
Partnership interest
Interested in shaping the partner program?
This form is a demonstration. Until privacy and legal prerequisites are approved, it does not send, store or share anything you type.
To discuss the partner program, write to contact@varnyxis.com