You’ve got questions. We’ve got answers. Find out the answer to everything you have wanted to know about agentic exposure management and how Hadrian brings proactive protection to companies across the globe.
Frequently Asked Questions
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Can we use the results as audit evidence?
Yes. Each risk keeps its proof of concept, remediation steps and history, and you can share it securely or print it as a PDF. Nova pentests also include a compliance-ready report that maps results to frameworks such as SOC 2, ISO 27001 and NIS2.
Which ticketing tools does Hadrian work with?
Hadrian integrates with ticketing and ITSM tools such as Jira, ServiceNow, Azure DevOps, Linear and GitHub, and with messaging tools such as Slack and Microsoft Teams. Other systems can connect through webhooks and the Hadrian API.
Do retests cost extra?
No. Retesting is built into the remediation workflow at no additional cost. Each Nova pentest includes unlimited retests within the first 12 months.
How does Hadrian confirm that a fix worked?
When your team marks a risk as resolved, Hadrian tests it again the way an attacker would. The risk is closed only when the exposure can no longer be exploited. If it still can, the risk stays open.
How often does Hadrian test our attack surface?
Continuously. Passive discovery runs every hour, and any change on your attack surface, such as a new host, port or software version, triggers new tests.
Is it safe to test production systems continuously?
Hadrian uses safe exploitation to confirm that an exposure is real. Humans stay in the loop for scoping and run safety checks before higher-risk testing goes ahead.
How does Hadrian chain findings into attack paths?
Hadrian's agents learn your environment, including the technologies you run and the services you expose, and use it to decide what to test next. They combine exposures the way an attacker would and only report a path once they have exploited it, with reproduction steps and evidence.
Does automated red teaming replace our red team exercises?
No. Hadrian focuses on your external, internet-facing attack surface. Exercises that cover internal networks, social engineering or physical access still need a human red team. Hadrian keeps testing the external perimeter between those exercises.
Does Atlas still test for older vulnerabilities?
Yes. Attackers keep scanning for flaws that are years old, so Atlas does too. Older CVEs stay in the test set, and every change on your attack surface, such as a new host, port or software version, triggers new tests.