Platform overview¶
ScanNinja scans your environment and turns the results into findings, reports, and compliance evidence. This page orients you; the sections below walk through setup and day-to-day use.
The pieces you'll work with¶
| Piece | What it is |
|---|---|
| Scanner agent | You install this on the hosts you want to monitor. It runs scans and reports the results back to the platform over an encrypted channel. |
| Dashboard | The web UI where you register scanners, launch and schedule scans, review findings, and export reports. |
| Scans | Run on-host (via the agent) or off-host from the platform — network, web, container, Kubernetes, supply chain, and cloud compliance checks. |
Behind the scenes, the platform enriches findings, keeps its CVE data current, and stores your results securely and isolated per organization — see Architecture for the high-level picture.
Start here¶
- Set up a scanner agent — install it on the hosts you want to monitor.
- Run your first scan from the dashboard, then review the findings it produces.
- Map findings to compliance frameworks — PCI / SOC 2 / ISO / CMMC.
What this docs site is NOT¶
- Not the product's marketing site. Go to scanninja.ai for pricing, demos, customer stories.
- Not an attestation. Findings + mappings here support your auditor; they don't replace a SOC 2 Type II report or PCI ROC.
- Not API SDK documentation per language. We publish a single OpenAPI spec; SDK generators land later.