> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# What is Snapsec?

> Understand Snapsec's vision, architecture, and how it unifies exposure management with autonomous validation.

## The Modern AppSec Challenge

Modern enterprise architectures span hybrid clouds, microservices, serverless APIs, third-party SaaS, and distributed CI/CD pipelines. Traditional vulnerability management suffers from:

* **Siloed Tooling**: Separate scanners for DAST, SAST, cloud assets, and network perimeters with conflicting severities.
* **Alert Fatigue**: Thousands of CVEs with no business context or exploitability signal.
* **Manual Pentesting Gaps**: Point-in-time pentests conducted once a year that are outdated within days of code deployment.
* **Remediation Bottlenecks**: Developers overwhelmed by raw scanner outputs without clear reproduction steps or fix verification.

Snapsec solves this by acting as a **single command center** for security teams, developers, and executive leadership.

***

## Core Pillars of Snapsec

> [card] 1. Attack Surface Management (ASM)
>
> Continuous external discovery of domains, DNS records, SSL certificates, open ports, and cloud shadow IT without deploying agents.

> [card] 2. Asset Inventory Management (AIM)
>
> Centralized 360° catalog mapping APIs, containers, code repos, workstations, and business unit ownership.

> [card] 3. Continuous Vulnerability Scanning (VS/WAS)
>
> Automated vulnerability engines covering web apps, REST APIs, network infrastructure, containers, and code security.

> [card] 4. Autonomous AI Pentesting
>
> AI agents that simulate real-world attacker techniques, chain multi-step exploits, produce verified evidence, and validate remediation.

***

## Key Differentiators

| Feature | Legacy Vulnerability Management | Snapsec Enterprise Suite |
| :- | :- | :- |
| **Discovery** | Manual IP lists or static CMDB imports | Continuous passive and active internet-wide reconnaissance |
| **Asset Context** | IP / hostname only | Business unit, technical owner, data classification, and blast radius |
| **Validation** | Theoretical CVE vulnerability matching | Active proof-of-concept verification via AI Pentesting engine |
| **Scoring** | Generic CVSS base scores | Contextual TrueRisk™ weighting asset value, exposure, and exploitability |
| **Remediation** | Static export to CSV / Jira tickets | Automated SLA tracking, blocker resolution, and one-click re-testing |
| **Deployment** | Cloud-only or rigid legacy VM appliances | Multi-tenant SaaS, Private Cloud, On-Premises, and 100% Air-Gapped |

***

## Next Steps

> [card] [Platform Overview](https://docs.snapsec.co/get-started/platform-overview.md)
>
> Explore the Snapsec platform components and shared architecture.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.