Dashboard - DDactic

—

Run a scan to see your exposure.

Next: Discover

One step at a time. Full workflow is in the card below.

All steps ▼

Network Topology

Full view

Select a company to view topology

Click to expand

Coverage Radar

Scan Depth Protection

Discovered Endpoints API endpoints, login pages, and other discovered URLs

API

No Endpoints Discovered

Run L7 reconnaissance to discover endpoints

Databases & Credentials Exposed credentials and database connections found

No Credentials Found

Run scans to discover exposed credentials

Origin IPs & CIDRs Backend origin IPs and network ranges

No Origins Discovered

Run scans to discover origin IPs behind CDNs

Web Applications Browser-based applications (device-agnostic)

Web

No web app endpoints found

Capture web browser traffic to discover web application endpoints.

Assets

IPs

Filters

DNS

CDN/WAF

Assets

Traffic Flows

WAF CDN Only Exposed On-Prem

Loading topology...

Loading network topology from scan results.

Red Team BETA Vulnerabilities classified by attack payload category (AAAA + CIA + Infrastructure)

Fleet Test Plan RTaaS Distributed RTaaS vectors matched to recon signals — phases ordered for execution

Select a company to generate the fleet test plan.

Databases & Credentials Exposed databases and leaked credentials found in breach databases

L7 Reconnaissance Results Discovered endpoints, protocols, and security findings from Layer 7 reconnaissance (HTTP, gRPC, GraphQL, WebSocket, DNS)

No L7 Recon Data

Run L7 reconnaissance on assets to discover endpoints and vulnerabilities

Vulnerabilities Security vulnerabilities discovered during reconnaissance

No Vulnerabilities Found

Run scans to discover vulnerabilities

L7 Attack Simulation Predicted resilience based on scan findings. No live attacks performed.

SIM

No Simulation Data

Run the attack_simulation follow-up stage to generate predictions.

Recommendations Pre-testing preparation, test plans, and post-testing hardening recommendations

Rec

No Recommendations Yet

Complete a scan to generate recommendations.

Vendor Coverage Matrix What protection layers each vendor offers and what we detect in your infrastructure

Loading coverage data...

CLI Hardening Commands Generate vendor-specific CLI commands with your saved credentials

Connect your CDN/WAF vendor accounts in Account Settings > Vendor Integrations to generate CLI commands with your actual credentials.

Resilience Profile OPI-based pre-test assessment with attack surface analysis

Risk

No Risk Data Available

Complete a scan to generate risk assessment.

Security Reports Comprehensive reports including pre-testing recommendations, testing results, and post-testing recommendations

Reports

No reports yet

Complete a scan to generate your first security report.

Attack Surface Test Plan Maps recon findings to DDoS attack vectors

Loading test plan...

OPI Impact

Total Bots

Online

Capacity (PPS)

Platforms

Deploy Fleet

Platform

Region

Count

Type

Spot instances

Active Fleet

No bots deployed

Deploy bots above to build your testing fleet.

Enterprise Plan ACTIVE

0 / unlimited bot-minutes used

Your Assets

Company

Traffic Baseline NO BASELINE

No traffic baseline captured. Deploy the monitoring beacon to capture normal traffic patterns for 48-72 hours before testing. This enables safe test thresholds and accurate rate limit calculations.

Skip baseline and use industry defaults

Assessment Progress

Baseline

Attack

Measure

Harden

Verify

Report

PREMIUM

Target API Intel

Craft the exact request your APIs expect — AI-assisted payload templates, mTLS client certificates, session auth, and spec imports. Everything the test fleet needs to hit your real target behavior, not a generic probe.

Need a curl / fetch / k6 template for one of these endpoints? Open the and ask — it has access to your scan context and the saved auth below.

Mutual TLS & Target Auth For APIs that require client certificates, API keys, or bearer tokens at the network layer. Stored per-company; test requests pick them up automatically.

Not configured

Auth mode

Base URL (optional)

Upload API Specifications Import HAR files, OpenAPI specs, Postman collections, GraphQL schemas, WSDL, or gRPC protos to discover attack surface

Supported formats

HAR (.har) - Browser traffic captures with auth sessions
OpenAPI / Swagger (.json, .yaml, .yml) - REST API specs v2.0/3.x
Postman Collection (.json) - Postman v2.1 collections with variables
GraphQL (.graphql, .gql, .json) - SDL or introspection result
WSDL (.xml, .wsdl) - SOAP service definitions v1.1/2.0
gRPC / Protobuf (.proto) - Service and RPC method definitions

What gets extracted

API endpoints - Paths, methods, parameters from any format
Authentication schemes - Bearer, API keys, OAuth2, CSRF, cookies
API gateways / servers - Detected from specs or traffic headers
GraphQL operations - Queries, mutations, complexity estimates
gRPC services - RPC methods, streaming types, message types
SOAP operations - Services, ports, bindings

Sensitive tokens are automatically sanitized. Raw credentials are never stored.

📂

Drop a file here or click to browse

.har, .json, .yaml, .yml, .xml, .wsdl, .graphql, .gql, .proto - Max 50 MB

API Endpoints

API Gateways

Auth Patterns

Domains

API Gateways Detected

Authentication Patterns

Discovered Endpoints

Method	Path	Domain	Status	Type	Auth

Triggers a new scan incorporating the uploaded HAR intelligence into the test plan.

Company	Subdomain	Port	Bots	Status	Actions
Loading C2S fleet...

Deploy Load Fleet

Platforms

All AWS GCP (off) Hetzner DigitalOcean Vultr OVH Linode Scaleway Alibaba Tencent Azure IBM Exoscale IONOS Civo Fly GCore Kamatera Cherry LunaNode Leaseweb

Load Fleet Size

1/platform × 21 platforms

Instance Type

Auto

Region

Auto (distribute)

Tag

Target

Duration (s)

Expected fleet: refresh quotas to calculate

Est. run cost: ~$0.01 (12 platforms × instance time @ ~$0.025/hr avg)

Spot instances 0 = persistent · 1 = check-in only · N = attack N seconds

Platform Capacity

AWS

GCP

Hetzner

DigitalOcean

Vultr

OVH

Linode

Scaleway

Alibaba

Tencent

Monitoring Links — auto-derived from scope

Load a company scope to generate monitoring links.

No bots online | PPS — | RPS — | Gbps — Live C2S

Traffic Intelligence & Hardening

Traffic Beacon Setup

Domain

Automated Hardening

Pipeline Capacity optional Improves L3/L4 OPI accuracy for on-prem assets + Configure

Vendor

Rule Type

Use stored credentials

Expression (CF filter expression)

Threshold (req/min)

OPI Impact

Loading OPI comparison...

Test Configuration

Use the AI chat (Test Config mode) to create test configurations, then review and execute them here.

Live C2S Bots

Bot ID	Platform	IP	C2S	PPS	CPU	Uptime
Loading C2S data...

Platform Status

Platform	Bots	Quota	Regions	Boot ETA	Traffic	Snapshot	Actions

Deployment Log

Waiting for activity...

Profile

Email -

Account Created -

Last Login -

Security

MFA Status Disabled

Recent Activity

Appearance

Customize the dashboard with your brand colors. Changes are saved per-device.

DDactic Dark

DDactic Light

Company Dark

Company Light

Custom Dark

Custom Light

Auto-detect Brand Colors

Vendor Integrations

Connect your CDN, WAF, and cloud providers to generate working CLI hardening commands with your credentials.

Connected Vendors -

AI Assistant Settings

Configure DDactic AI preferences. Choose your preferred AI provider or bring your own API keys.

AI Provider Cloudflare

Protection Context Per Company

Declare protections that passive scanning cannot detect. This data adjusts your OPI score and enriches reports. Changes apply to the currently selected company.

Cloud Scrubbing Center
Prolexic, Lumen, Radware Cloud, NETSCOUT TMS Rate Limiting Active
Configured thresholds on API/login endpoints Private Tunnel / VPN
Cloudflare Tunnel, Argo, WireGuard to origin On-Prem Appliance (Prevention Mode)
F5 AFM, Radware DefensePro actively blocking Anycast Network
Origin IPs distributed across PoPs Multi-Region Failover
Active-active or active-passive regions

Scrubbing Vendor

On-Prem DDoS Appliance

Capacity shown is vendor max. Actual depends on model and config.

Critical Assets (one per line)

Unprotected critical assets weigh 3x heavier in OPI calculation.

Known Subdomains to Seed seeded into every rescan

Subdomains passive enumeration won't find - CF Tunnel hosts, demo targets, internal services. Injected in Stage 1 of every scan.

Business Context

Industry

Uptime SLA

Notes

Integration Webhooks

Receive scan results and alerts via webhooks. Compatible with Jira, ServiceNow, Slack, and custom endpoints.

Webhook URL

Events

Scan completed New findings detected OPI score changed Shield alert triggered

Fingerprint Profiles

Cross-Layer Hashes

Defense DB Entries

Scoring Latency

Top 20 Fingerprints by Volume Color = verdict: pass / challenge / block

Loading fingerprint data...

Verdict Distribution

Engine Info

Traffic Over Time 1h 6h 24h 7d

Loading time-series data...

Live Metrics

Top JA3 Fingerprints

Alert History (Last 24h)

Loading alerts...

Beacon Status

Current RPS

Active Alerts

Playbooks Ready

Beacon Deployment

JS Beacon Checking...

API Middleware Beacon Checking...

Deploy at least one beacon to enable real-time attack detection. Go to Testing > Baseline to configure.

Attack Detection

No beacon data available. Deploy a beacon to enable detection.

IR Playbook — During-Attack Response

Actions to execute mid-attack. For pre-attack hardening checklist see Analysis > Recommendations.

Run analysis to see recommended playbooks.

Action Log

No actions executed yet.

Vendor Integrations

Overview

Domains

Assets

Network Topology

Node Details

Analysis

Free Plan

Reports

Team

DDoS Resilience Testing

Access Restricted

Target API Intel

Supported formats

What gets extracted

Crafted Commands

Execution Results

CRM Pipeline

Account Settings

Shield