See your EBS attack surface clearly — before attackers do.

The free Secure Configuration Checker is a standalone script package you download and run yourself. It audits your EBS security configuration across the database, application mid-tier, and front-end tiers and produces a report you can review immediately. There is no cost and no engagement required.

The full attack surface assessment is a consulting engagement. It includes the complete scanning suite — Attack Surface Scanner, Static Analyzer, and Navigation Graph — plus expert analysis of the results. We run the tools against your environment, interpret the findings across all six evidence layers, and deliver a prioritized remediation roadmap with specific recommendations. This service is priced per engagement and is well-suited for organizations preparing for a compliance review, planning a security hardening initiative, or evaluating the risk surface of a new or acquired EBS environment.

A typical engagement includes:

1. Data collection — We run the full scanning suite (passive and/or active mode) against your EBS environment. You control the scope and timing.

2. Analysis — We correlate findings across all six layers: configuration, registry, navigation reachability, runtime surface behavior, static code analysis, and manual code review where warranted.

3. Reporting — You receive a prioritized findings report in the Chiton Guard viewer, including recommended remediation actions, lockdown candidates, and areas requiring additional testing.

Engagements are scoped based on the size and complexity of the EBS environment. Contact us to discuss your situation.

No installation, no agents, and no modifications to EBS configuration or application code. The assessment suite runs in two modes:

Passive mode reads database and configuration data only. No HTTP requests are made to the application — there is no activity in OHS access logs or the EBS audit trail.

Active mode probes application endpoints via HTTP to observe runtime behavior. This generates activity in OHS access logs, similar to a real user session. No data is written and no configuration is changed.

For environments where any application traffic is sensitive, run passive mode first. Active mode is recommended for complete attack surface coverage.

The package includes the assessment scripts, configuration checklist, setup guidance, and instructions for collecting the inputs needed to generate viewer output.

Generic tools report infrastructure findings — open ports, known CVEs, misconfigured headers. They do not understand the EBS authorization model. Chiton Guard evaluates EBS-specific constructs: functions, menus, responsibilities, Allowed Resources registry coverage, and runtime behavior — together, in context.

A chiton is a small tidepool mollusk protected by eight overlapping shell plates: flexible natural armor built for harsh shoreline environments.

We chose Chiton Guard because that combination fits how we think about security: strong protection, practical resilience, and adaptability under real-world pressure.

There is also a personal connection. Eric Bing, one of our founders, leads tide pool tours in his free time, and chitons are one of the quiet, fascinating creatures people often overlook until someone points them out. The Flame Lined Chiton is a favorite — a beautiful West Coast species whose tiny teeth are reinforced with magnetite, an iron-based mineral. Basically, metallic teeth.

There is overlap — both are grounded in the Secure Configuration Guide and general best practices. Chiton Guard collects from a broader set of inputs, checks for exploit and scanning indicators, and is designed to be easy to rerun and integrate into a customer's existing review workflow.

EBS 12.1 and 12.2 are currently supported.

Configuration gaps, exposed or reachable resources with no function gate, mismatches between menu reachability and registry coverage, runtime behavior that suggests overexposure, and code-level authorization issues that warrant follow-up review.