Kikimora documentation

User documentation for the Kikimora security and vulnerability management platform, covering every module from the dashboard to compliance.

Kikimora is a security and vulnerability management platform. It discovers your assets, scans them, scores what it finds against your environment rather than a generic severity table, and tracks remediation through to closure.

These pages document each module as it behaves in the product.

Start here

Dashboard

The landing page. Thirteen widgets aggregating risk, vulnerability, endpoint, and exposure metrics, each linking into the module behind it.

Vulnerabilities

The central repository for every security finding, whatever discovered it — scans, agents, exposure discovery, or manual testing.

Risk management

How the Kikimora Score contextualizes findings against your environment, and what portfolio impact points measure.

Finding and scanning assets

• Exposure — discover and monitor your internet-facing attack surface.
• Infrastructure — the central inventory of every known asset.
• Endpoints — agent-monitored hosts and their telemetry.
• Web applications — define the web targets that scans run against.
• Auth records — credentials for authenticated scanning.
• Scans — schedule scans and review their runs.

Assessing and testing

• Manual tests — human-driven assessments with checklists.

Compliance

• Hardening — SCA benchmark evaluations against standards such as CIS.
• Approved software — an allow-list of authorized applications.
• Integrity monitoring — real-time file and registry change tracking.