Forgotten devices
Cameras, printers, storage boxes and building controllers that nobody patched since the day they were installed.
Internal network VAPT by Vaeto
See every host.
See every host.
Before attackers do.
VMiter maps your internal network, fingerprints every service and runs safe, read-only security checks from inside your perimeter, with nothing sent to the cloud.
On-premRuns inside your network
2 modesQuick or Deep
Read-onlyNo exploits, no credentials
CVSS 3.1Scored, evidence-backed findings
The blind spot
Firewalls watch the door.
Firewalls watch the door.
Nobody watches the hallway.
Most breaches spread from the inside. One forgotten device or one service left open is all an attacker needs once they are through the door.
Legacy protocols
SMB without signing, RDP without NLA, cleartext Telnet and FTP: the doors attackers use to move from one host to the next.
Exposed data stores
Databases and caches that answer anyone who asks, often with no password at all, sitting one hop from every laptop.
How it works
From blank network to
From blank network to
prioritised fixes.
Point VMiter at a range you own. It works through four stages and shows you every step.
Scan modes
As light or as deep
As light or as deep
as the moment needs.
Two modes: a fast first look at what's on your network, or a full assessment of everything running on it.
Mode 1
Quick
Host discovery with common TCP ports and basic service detection. See what's on the network in minutes.
- Finds every live host in the range
- Checks the most common TCP ports
- Identifies the services behind them
Best forFast inventory & first look
Mode 2
Deep
Wide TCP enumeration, detailed version detection and the full set of safe security checks.
- Enumerates a much wider range of ports
- Pins down exact service versions
- Runs every read-only security check, with evidence and CVSS
Best forFull network VAPT
Coverage
Every service on the wire,
Every service on the wire,
checked for what matters.
The Vaeto Vulnerability Engine knows what each service should look like and flags where it doesn't.
TLS & certificates
QueuedSSH
QueuedWindows, SMB & RDP
QueuedDatabases & data stores
QueuedWeb servers
QueuedMail & DNS
QueuedDirectory services
QueuedNetwork infrastructure
QueuedIoT, OT & device interfaces
QueuedRemote access & file sharing
QueuedHost posture
Queued
Evidence first
Findings you can act on,
Findings you can act on,
not noise you have to triage.
A finding without proof is refused. Every result carries the evidence, the impact, a CVSS score and the fix.
Critical
VAE-MONGO-002 · CWE-306
MongoDB Answers Commands Without Authentication
9.8CVSS
// isMaster handshake response, 10.0.4.18:27017 { "ismaster": true, "version": "4.4.6", "maxWireVersion": 9, "readOnly": false, "ok": 1 } // build details returned instead of an authentication error
VMiter sends the isMaster handshake that every MongoDB driver sends first. The server answered with its own build information rather than an authentication error.
Read-only: no database is listed and nothing is read or written.
An unauthenticated MongoDB serves every document it holds to anyone who connects, and accepts deletion the same way. This is the configuration behind the ransom campaigns that wiped tens of thousands of exposed databases.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Enable authorisation and create an administrative user.
- Bind the instance to an internal interface only.
- Confirm what has been reachable while it was open.
- Proof attachedThe exact response that confirmed the issue, captured from the wire.
- How it was foundPlain-language detection logic, so anyone can re-check it.
- Why it mattersReal-world impact, with a CVSS 3.1 vector that matches the severity.
- What to doConcrete remediation steps your team can act on today.
Safe by design
Built to run on
Built to run on
networks that can't go down.
Read-only checks
No exploits, no password guessing, nothing written. Checks only send what a service answers before login.
Stays on-premises
Runs on a machine inside your network. Results live in a local database and never leave your environment.
Scope guardrails
Only private ranges you approve can be scanned. Targets are validated before anything touches the network.
Full audit trail
Who scanned what, when and in which mode, recorded for every assessment.
Explainable risk
Every rating shows how it was reached. A severity that contradicts its CVSS vector is corrected.
No admin rights needed
Runs as an ordinary user. Grant elevated rights only if you want OS fingerprinting and UDP services too.
Why VMiter
Between a noisy scanner
Between a noisy scanner
and a once-a-year pentest.
Generic scanners
Annual manual pentest
VMiter
VMiter
Runs whenever you need it✓–✓
Evidence attached to every finding–✓✓
Read-only, safe for productionVariesVaries✓
Explainable risk rating–✓✓
CVSS 3.1 score on every findingVaries✓✓
Data stays inside your networkVariesVaries✓
The Vaeto family
Network, web and people.
Network, web and people.
Covered end to end.
Automated web application VAPT
vapptrix.com →
Internal network VAPT
You are here
Employee cybersecurity training
vsecurelearn.com →What is VMiter?
VMiter is Vaeto's internal network VAPT product. It discovers the hosts on your network, identifies the services they run and checks those services for known weaknesses and misconfigurations, then reports each finding with evidence, a CVSS score and a fix.
Does VMiter send our network data to the cloud?
No. VMiter runs on a machine inside your network and keeps its results in a local database on that machine. Hosts, ports and findings never leave your environment.
Is it safe to run on a production network?
VMiter's checks are read-only. They send the request a service answers before authentication, or read what discovery already found. No credentials are tried, nothing is written and no exploit is attempted.
What is the difference between Quick and Deep?
Quick finds the live hosts on your network and the common services they run, so you get a fast inventory. Deep enumerates a much wider range of ports, identifies exact service versions and runs the full set of safe security checks.
Do we need administrator rights to run it?
No. VMiter runs as an ordinary user and assesses TCP services. Running it with elevated privileges additionally enables operating-system fingerprinting and common UDP services.
What about our websites and the people on our network?
VMiter focuses on the network. For web applications, use Vapptrix, and for employee security awareness, VSecureLearn. Both are Vaeto products. Vaeto also offers manual penetration testing when you need a human-led assessment.
Put an eagle eye on
your internal network.
See VMiter run on a network like yours. We'll walk you through a live assessment.
Request a demo