> ## Documentation Index > Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt > Use this file to discover all available pages before exploring further. # Feature Overview > Explore the key capabilities that power Snapsec’s Suite. ## Vulnerability Management A comprehensive breakdown of the features offered in Snapsec’s Vulnerability Management module. Centralized view of all vulnerabilities with live metrics, trends, and remediation analytics. Manage security tests as assessments with their own metrics, members, and evidence. Track every finding from discovery to remediation with clear states and ownership visibility. Monitor SLA performance, detect breaches, and visualize remediation timelines in real time. Automatically discover and maintain an up-to-date inventory of all your assets across environments. Handle remediation blockers like business impact or severity revalidation collaboratively. Link vulnerabilities with change requests, releases, and patch tracking workflows. Contextual risk scoring for assets based on associated vulnerabilities and exposure. Connect with Jira, Qualys, Trivy, Nuclei, AIM, and more to automate imports and sync tickets. Generate executive-ready vulnerability and revalidation reports with rich customization. Quickly locate vulnerabilities, assets, or assessments using advanced filters and keywords. Use Snapsec VM as a centralized ticketing layer for any scanner or CI/CD workflow — powered by adapters. *** ## Attack Surface Management A comprehensive breakdown of the features offered in Snapsec’s Attack Surface Management module. A centralized view to visualize all discovered assets, ports, certificates, and exposures in real time. Automatically detect, track, and update every internet-facing asset to keep your inventory always current. Identify live and inactive subdomains, track WAF status, open ports, and exposure level for each. Analyze open and closed ports across assets to uncover exposed services and reduce attack vectors. Monitor SSL/TLS certificates for validity, expiry, and misconfigurations to maintain trust and compliance. Manage and analyze DNS records (A, MX, TXT, SOA) to detect misconfigurations and takeover risks. Detect and catalog technologies used across your assets for better risk visibility and patch prioritization. Automatically surface risky assets like internal IPs or staging portals with severity-based tagging. Automate exposure classification with custom YAML logic based on asset properties and vulnerability data. Run manual or scheduled scans to detect new assets and visualize historical discovery trends. Generate and export detailed PDF reports for exposed assets, open ports, and quarterly ASM summaries. Sync discovered assets and exposures with Snapsec VM for unified remediation and lifecycle tracking. *** ## Asset Inventory Management A comprehensive breakdown of the features offered in Snapsec’s Asset Inventory Management module. Centralized visibility of all assets — APIs, IPs, domains, repositories, registries, certificates, and more. Connect with tools like Cloudflare, GitHub, OCI, and Postman to auto-discover and sync assets in real time. Automatically classify assets by environment, owner, and exposure using YAML-based rule automation. Visualize and manage every layer of your digital ecosystem — from APIs to employees — for complete organizational awareness. Automatically evaluate asset risk using vulnerability data, exposure status, and contextual associations. Keep your asset inventory continuously refreshed through self-updating adapters that discover and sync new assets automatically. Assign, track, and visualize asset ownership across teams, departments, and business units for better governance and accountability. Public, read-only access to company-wide asset inventory for faster collaboration and transparency. Empower users to edit and enrich asset information directly — fostering shared visibility and data accuracy across teams. Visualize cross-asset dependencies and simulate impact to prioritize fixes that reduce the most risk. Manage staged or retired assets with audit history and secure reactivation controls. Tag, group, and export your inventory data seamlessly for audits, reporting, or analytics. *** ## Vulnerability Scanner A comprehensive breakdown of the features offered in Snapsec’s Vulnerability Scanner module. A centralized dashboard showing real-time vulnerability metrics, detection trends, affected assets, and top findings — instant visibility into your security posture. Every finding includes severity badges, asset context, environment details, state, and metadata to help teams focus on what truly matters. Findings synced to Snapsec VM automatically inherit SLA timelines, breach alerts, and remediation rules without manual work. Maintain a complete catalog of all scannable assets across your infrastructure with real-time health and scan coverage. Organize assets by Prod/Dev/Cloud Units or custom groups to run structured, repeatable scans at scale. All detected issues stored in one place with advanced search, filtering, suppression, and historical insights. Send findings directly into VM workflows or external tools like Jira for end-to-end remediation tracking. Schedule weekly, monthly, or custom recurring scans to ensure continuous visibility across your assets. *** ## Threat Management A comprehensive breakdown of the capabilities offered in Snapsec’s Threat Management module. A real-time, consolidated view of all threats across projects — including severity, CWE mappings, workload, and lifecycle insights. Automatically generate realistic, OWASP- and CWE-aligned threats using advanced prompt-driven modeling. Each project includes its own metrics, endpoints, members, and lifecycle tracking for structured threat modeling. Automatically discover API endpoints and map associated threats, methods, hosts, and density statistics. A powerful filtering and triage table for reviewing threats by severity, state, owner, endpoint, and confidence. Detailed threat breakdown with explanation, mitigations, references, request metadata, severity, and activity logs. Track each threat through structured states with owner assignments, progress tracking, and full audit history. Manage project roles and fine-tune threat-generation policies for secure, consistent, and high-quality analysis. *** ## Web Application Scanner A comprehensive breakdown of the features offered in Snapsec’s Web Application Scanner module. Unified visibility into all API requests across projects — including methods, URLs, collections, and vulnerability counts. A consolidated view of all detected API vulnerabilities with severity, status, timestamps, suppression, and scan mappings. Create and manage isolated Test, Dev, Sandbox, and custom environments, each with its own variable set. Automatically apply environment-specific values (URLs, tokens, IDs) to requests and scans for accurate, context-aware testing. Build and modify custom API security rules using YAML — supporting transforms, response checks, and CWE-based detection logic. Monitor every API scan with progress, rules applied, and vulnerability results in a single centralized view. Create reusable scan profiles with consistent headers (Authorization, API keys) for authenticated and repeatable testing. Integrations with Postman, Swagger, and other adapters to auto-import and sync API definitions — keeping endpoints updated for accurate, real-time security scanning. *** ## Explore Live Demo Follow our quickstart guide to set up your organization and start securing your assets today.