Supports configuration verification for various asset types including host systems, network devices, security devices, databases, middleware, virtualization/big data, with built-in authoritative security baseline verification specifications from level protection, MIIT, China Telecom, China Mobile, etc.

Features weak password vulnerability detection, supporting brute-force cracking of weak passwords for mainstream protocols, middleware, databases, cameras, and Web applications, with support for custom password dictionaries.

- Web Scanning: Classifies vulnerabilities based on OWASP TOP10 common Web vulnerabilities, detects security flaws in Web sites (such as SQL injection, Cookie injection, blind injection, XSS, file inclusion, sensitive information leakage, etc.), and provides security solution suggestions;

- Database Scanning: Conducts security scans on database systems focusing on configuration, authentication and authorization, vulnerability and patch management, to discover and assess potential security vulnerabilities and weaknesses.

Supports discovering security vulnerabilities in network devices and host systems, covering multiple vulnerability standards such as CVE, CVSS, CNVD, CNNVD, CNCVE, and Bugtraq.

In collaboration with the company's Future Laboratory and Vulnerability Security Research Institute, vulnerability announcements and updates are released on a weekly basis, with critical vulnerabilities addressed within 24 hours.