# ScruteX

> ScruteX (formerly BrandSek) is a Continuous Threat Exposure Management (CTEM) platform. It combines external attack surface management (EASM), dark web and data exposure monitoring, brand protection with takedowns, third-party (vendor) risk management, cyber threat intelligence, and AI-driven red teaming / pen testing in one agentless platform aligned to Gartner's five-stage CTEM framework. A free-forever plan is available.

Key facts:
- Name: ScruteX. Former name: BrandSek. Website: https://scrutex.ai
- Category: CTEM platform; external attack surface management (EASM); digital risk protection (DRP); threat intelligence; third-party risk management (TPRM)
- Deployment: SaaS, agentless, outside-in. No software installed on customer systems.
- Modules: Vulnerability Insights, Data Exposure Insights, Brand Insights, Threat Insights, Vendor Insights, Red Teaming & Pen Testing. AppSec Insights is in private beta.
- Plans: Freemium (free forever, 1 domain, monthly reports with limited results); Standard (priced per module per month, up to 10 domains); Enterprise (custom pricing, continuous real-time monitoring, all six modules).

## Product
- [Platform overview](https://scrutex.ai/platform): architecture, four data planes, CTEM lifecycle
- [All modules](https://scrutex.ai/solutions): the six integrated modules
- [CTEM](https://scrutex.ai/solutions/by-use-case/ctem): how ScruteX runs all five CTEM stages
- [External attack surface management](https://scrutex.ai/solutions/by-use-case/easm)
- [Vulnerability Insights](https://scrutex.ai/solution/vulnerability): exposed assets, ports, SSL, dangling subdomains
- [Data Exposure Insights](https://scrutex.ai/solution/data-exposure): dark web, leaked credentials, stealer logs
- [Brand Insights](https://scrutex.ai/solution/brand): lookalike domains, fake profiles, rogue apps, takedowns
- [Threat Insights](https://scrutex.ai/solution/threat): IOCs, ransomware and threat-actor tracking
- [Vendor Insights](https://scrutex.ai/solution/vendor): third-party risk questionnaires validated by CTEM data
- [Integrations](https://scrutex.ai/integrations)

## Pricing and trial
- [Pricing](https://scrutex.ai/pricing): Freemium, Standard, Enterprise
- [Free exposure scan](https://scrutex.ai/free-exposure-scan)
- [Free tools](https://scrutex.ai/tools)

## Free tools
- [Free tools index](https://scrutex.ai/free-tools)
- [PHP2Shell exposure checker](https://scrutex.ai/free-tools/php2shell): free passive check for CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2). Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, released 21 October 2026. PHP 8.1 and older have no upstream fix. A clear result is only claimed when a patched version is observed. Finding no PHP signals is not a clean result.
- [Advisory ruleset JSON](https://scrutex.ai/api/free-tools/php2shell/advisory): versioned rules the checker evaluates against.
- [ScruteX PHP2Shell advisory PDF](https://scrutex.ai/free-tools/php2shell/scrutex_advisory_php2shell_cve-2026-109618_109619_21-10-2026.pdf)
The scan API is POST /api/free-tools/php2shell/scan, one domain per request. Results stay on the page. This site does not email an advisory.

## Answers
- [Glossary](https://scrutex.ai/kb/glossary)
- [What is CTEM?](https://scrutex.ai/blog/what-is-ctem-continuous-threat-exposure-management)
<!-- Commented out until WEB-14 ships and /faq returns 200.
- [FAQ](https://scrutex.ai/faq)
-->

## Comparisons
- [Best CTEM platforms 2026](https://scrutex.ai/blog/best-ctem-platforms-2026-comparison)
<!-- Commented out until WEB-15 ships and these URLs return 200.
- [Compare ScruteX](https://scrutex.ai/compare)
- [ScruteX vs UpGuard](https://scrutex.ai/compare/scrutex-vs-upguard)
- [ScruteX vs SecurityScorecard](https://scrutex.ai/compare/scrutex-vs-securityscorecard)
- [ScruteX vs BitSight](https://scrutex.ai/compare/scrutex-vs-bitsight)
- [ScruteX vs Recorded Future](https://scrutex.ai/compare/scrutex-vs-recorded-future)
- [ScruteX vs ZeroFox](https://scrutex.ai/compare/scrutex-vs-zerofox)
-->

<!-- Commented out until WEB-21 and WEB-20 ship and these URLs return 200.
- [Customer stories](https://scrutex.ai/customers)
- [Trust & security](https://scrutex.ai/trust)
-->

## Research
- [Breach advisories](https://scrutex.ai/breach-advisories)
- [Weekly threat digest](https://scrutex.ai/weekly-threat-digest)
- [Knowledge base](https://scrutex.ai/kb)

## Company
- [About](https://scrutex.ai/about-us)
- [Leadership](https://scrutex.ai/leadership)
- [Partners](https://scrutex.ai/partners)
- [Contact](https://scrutex.ai/contact)

## Optional
- [Blog](https://scrutex.ai/blogs)
- [Compliance hub](https://scrutex.ai/compliance)