Support
Overview
This page answers the most common questions about NOCT, walks you from zero to your first scan, and documents the public alerts API for pulling dashboard data into other tools.
Frequently asked questions
- What is NOCT? An autonomous security validation platform that continuously tests your infrastructure the way real attackers do, validating what is actually exploitable and prioritizing the risks that matter.
- How is it different from a vulnerability scanner? Traditional scanners identify potential issues; NOCT goes further by validating exploitability, correlating findings across your environment, and surfacing real business impact.
- Do I need cybersecurity expertise? No. Basic knowledge helps, but NOCT is built to simplify security validation and deliver actionable findings without deep security expertise.
- What does it scan? External attack-surface discovery, vulnerability detection (CVE matching, misconfigurations, exposed services, weak credentials), and, when SSH credentials are provided, internal authenticated deep scans. Findings are correlated into dashboard risk paths.
- Does it use real attack techniques? Yes - the scans use the same tools threat actors use in real attacks.
- Does it install agents? Only optionally, for internal scans; external scanning is entirely agentless.
- How often are assets scanned? You choose the cadence per asset: scheduled daily or weekly, plus on-demand scans up to one manual scan per day per asset.
Getting started
Sign up at https://noct.gg/dashboard with your email and a strong password (12+ characters recommended). Add your assets (IPs or domains) in the Assets tab, let NOCT scan, review the prioritized findings in the Overview tab, and generate a shareable report from the Reports tab.
Public alerts API
The alerts API lets you pull the same alert data shown in the dashboard into reporting tools, SIEM workflows, and internal status pages. Endpoints let you list and filter alerts by severity and asset, fetch a single alert with full detail, get severity totals, group alerts by asset, pull category breakdowns, build a 30-day timeline, request an AI summary for a single alert, and generate an attack-path narrative across current alerts. Dashboard API access is offered through Enterprise/API plans.