Edoardo Zatti, Zoran Gorgiev
Table of contents #
July’s here, and it’s another packed month. This release brings three improvements. As always, this update reflects the feedback you’ve shared and our broader vision for what a continuous offensive security and AI penetration testing platform should be.
Here’s what’s new in Equixly’s July update:
Service Overview: See your full attack surface in a single visual.Qualys integration: Push findings and pull assets between Equixly and Qualys.Discovery scan optimization: Reach more endpoints and keep scanning when sites push back.
Service Overview #
Every service now opens to a single Overview page that lays out its entire attack surface in one view. At the center sits a radial map that draws every endpoint and parameter on one canvas, making the full shape of what a service exposes visible at a glance.
This single visual makes it easy to understand what’s there, reason about coverage, and catch endpoints and relationships that would otherwise slip by unnoticed.
What it shows
Around the map, the Overview pulls together the context you need to act on it. Each service gives you three aspects in one place:
Summary: The base URL, service type, version, tags, and whether the service is running in production. A quick, factual read on what you’re looking at before you dig in.Attack surface: Every endpoint and parameter on one map, backed by a searchable list where each route carries its HTTP method and parameter count. Filter down to a single endpoint or take in the whole surface at once.Projects including this specific service: Every project that relies on the service, each stamped with when it was last scanned, so you know exactly where the service is in use and how current your testing is. A service can sit in several projects at once, and the Overview now shows those associations from the service itself. Previously, you’d have had to check projects one by one. And when a particular service no longer belongs in a project, you can dissociate it in the Overview, instead of having to open that project’s settings.
Why it matters
Spot exposure without reading a table: The shape of a service is immediately legible instead of buried in rows of data.Reason about coverage at a glance: Seeing every endpoint together makes gaps and forgotten routes more obvious.Know where a service lives: The list of projects and their last-scan dates ties the attack surface back to testing activity, so stale coverage stands out. Previously, this link was invisible: You couldn’t tell whether a service was used in zero, one, or many projects, and detaching one meant digging into each project’s configuration. Now the Overview shows every project a service belongs to and lets you dissociate it right there.
Qualys integration #
Equixly now connects to Qualys, the well-known vulnerability management platform.
With this integration in place, you can:
Push findings into Qualys VMDR, so vulnerabilities discovered in Equixly flow straight into the system your team already uses to track and manage risk.Pull your asset inventory to scope tests, using what Qualys knows about your estate to focus scans on the assets that matter.** Take advantage of workflow refinements built for security teams**, smoothing the handoff between finding an issue and acting on it.
The result is less manual shuttling of data between tools and a tighter loop between discovery and remediation.
Discovery: Optimized scans, fewer blocks #
Discovery now paces its own scans to work around rate limits and defensive layers, so you get complete coverage even on protected targets.
You set the boundaries directly in the Discovery scan settings, including max depth, duration, and rate limiting, aligned with your project’s scan settings. From there, Equixly manages its own request rate within the limits you define. It caps throughput, smooths out bursts, and adds subtle random delays so requests don’t spike in sync.
Under the hood, that pacing is backed by genuine rate-limit awareness:
Exponential backoff with jitter, tracked as per-origin throttle state, so each target is paced on its own terms rather than by a single global rule.** Scans that are no longer abandoned when a WAF or CDN pushes back**, including Akamai, Cloudflare, and AWS WAF.
By staying within these boundaries, scans avoid tripping the defenses a WAF or CDN would otherwise use to cut them short. That allows Equixly’s offensive security tests to run to completion on targets that would have blocked them in the past.
Closing thoughts #
July’s release pushes the platform forward on three fronts at once:
- A clearer, single-visual picture of your service’s attack surface
- A native Qualys connection
- Smarter Discovery scans that stay within the limits you set and keep running under pushback
Taken together, these three improvements let you take in an entire service from a single screen, move findings and assets between Equixly and the platforms your team lives in, and reach the end of a scan even where guarded targets once stopped it.
[
]
Edoardo Zatti
Technical Product Manager
With a master's degree in Theoretical Physics, Edoardo has established a robust analytical thinking and problem-solving foundation. During the final year of his studies, he taught an integration course at the university, refining his communication skills and kindling his passion for education. His academic journey took an exciting turn during his master's program as he ventured into the field of computer science through relevant courses. These courses sparked his interest in IT and led him to specialize in backend development, where he sharpened his skills through involvement in complex projects and practical experience in other Tech companies.
[
]
Zoran Gorgiev
Technical Content Specialist
Zoran is a technical content specialist with SEO mastery and practical cybersecurity and web technologies knowledge. He has rich international experience in content and product marketing, helping both small companies and large corporations implement effective content strategies and attain their marketing objectives. He applies his philosophical background to his writing to create intellectually stimulating content. Zoran is an avid learner who believes in continuous learning and never-ending skill polishing.