Kikimora documentation

Kikimora is a security and vulnerability management platform. It discovers your assets, scans them, scores what it finds against your environment rather than a generic severity table, and tracks remediation through to closure. These pages document each module as it behaves in the product.

Start here

Dashboard

The landing page. Thirteen widgets aggregating risk, vulnerability, endpoint, and exposure metrics, each linking into the module behind it.

Vulnerabilities

The central repository for every security finding, whatever discovered it — scans, agents, exposure discovery, or manual testing.

Risk management

How the Kikimora Score contextualizes findings against your environment, and what portfolio impact points measure.

Finding and scanning assets

Exposure — discover and monitor your internet-facing attack surface.
Infrastructure — the central inventory of every known asset.
Endpoints — agent-monitored hosts and their telemetry.
Web applications — define the web targets that scans run against.
Auth records — credentials for authenticated scanning.
Scans — schedule scans and review their runs.

Assessing and testing

Manual tests — human-driven assessments with checklists.

Compliance

Hardening — SCA benchmark evaluations against standards such as CIS.
Approved software — an allow-list of authorized applications.
Integrity monitoring — real-time file and registry change tracking.

⌘I

​Start here