FAQ
Frequently asked questions about XnoleX.
What is XnoleX?
XnoleX is an automated Vulnerability Assessment and Penetration Testing (VAPT) and web reconnaissance platform designed for security professionals. It combines multiple security tools into a unified workflow for comprehensive attack surface analysis.
Is XnoleX only a vulnerability scanner?
No. XnoleX combines reconnaissance (subdomain discovery, port scanning, HTTP probing) with vulnerability scanning (nuclei templates) in a correlated workflow. The platform discovers what exists in an attack surface and then identifies security issues across all discovered services.
Who is XnoleX for?
XnoleX is built for security professionals, penetration testers, bug bounty hunters, and security teams needing continuous attack surface monitoring. It provides the tooling needed to systematically assess and monitor external-facing infrastructure.
What is the difference between reconnaissance and vulnerability scanning?
Reconnaissance discovers what exists — subdomains, endpoints, services, open ports, and technology stacks. Vulnerability scanning identifies security issues within those discovered services, such as misconfigurations, known CVEs, and application-level flaws. XnoleX runs both phases in sequence to provide a complete picture.
How are scans executed?
Scans run via real, industry-standard security tools:
- subfinder — Subdomain discovery
- httpx-pd — HTTP probing and technology detection
- nuclei — Vulnerability scanning with templates
- nmap — Port scanning and service detection
Each tool runs as a managed subprocess with real-time progress tracking and structured output collection.
How long does a scan take?
Scan duration depends on the engine type and target size:
- Full scans run all tools sequentially and take the longest
- Subdomain scans focus on discovery and are generally faster
- Nuclei scans depend on the number of templates matched
Actual duration depends on the target's attack surface — a small single-page site will complete much faster than a large enterprise domain with many subdomains.
Can scans run concurrently?
Yes, within your subscription tier's concurrent scan limit:
| Tier | Concurrent Scans |
|---|---|
| Demo (Free) | 1 |
| Monthly Pro | 3 |
| Yearly Pro | 5 |
There is also a system-wide limit of 10 concurrent scans across all users.
How is data retained?
Scan results are stored in PostgreSQL. Retention periods vary by subscription tier:
| Tier | Data Retention |
|---|---|
| Demo (Free) | 30 days |
| Monthly Pro | 1 year |
| Yearly Pro | 2 years |
Can I use the API?
Yes. XnoleX provides a full REST API with JWT or API key authentication. API access is available on Monthly and Yearly plans. The Demo tier does not include API access. See the API Reference for complete documentation.
Is XnoleX open source?
No. XnoleX is a commercial SaaS platform. It integrates open-source security tools (subfinder, httpx, nuclei, nmap) internally, but the XnoleX platform itself is not open source.
What scan engines are available?
XnoleX offers three scan engines:
| Engine | Description |
|---|---|
| full | Comprehensive — runs all tools (subfinder, httpx, nuclei, nmap) sequentially |
| subdomain | Discovery-focused — focuses on subdomain enumeration and HTTP probing |
| nuclei | Vulnerability-focused — runs nuclei template scanning against known endpoints |
How do scheduled scans work?
Scheduled scans use cron expressions to define recurring scan intervals. Configure a schedule with a target, engine, and cron expression, and the scheduler will automatically trigger scans at the configured times.
{
"target_id": "tgt_abc123",
"engine": "full",
"cron_expression": "0 2 * * *"
}The example above runs a full scan every day at 2:00 AM. You can also trigger an immediate run via the POST /api/v1/schedules/{schedule_id}/run-now endpoint.