Recon → Score → Simulate → Harden → Monitor. Walk through each phase and see how they connect.
5-minute live walkthrough ยท no staging, no demo data
1
Passive Recon & Attack Surface Map
22+ passive methods run before any active traffic: certificate transparency, DNS enumeration, WAF fingerprinting, rate-limit probing, API gateway detection, JA3/JA4 baseline. On average, 47 assets are discovered per company scan.
ddactic.net/dashboard > Assets
Asset
CDN / WAF
Rate Limit
API GW
Status
acme.com
Cloudflare Pro
1,200/min
—
Protected
api.acme.com
CloudFront
300/min
AWS APIGW
Partial
staging.acme.com
None
—
—
Exposed
app.acme.com
Cloudflare
600/min
—
Protected
Assets found
47
With WAF
31
Exposed
9
API endpoints
12
Entirely passive: All recon uses public data sources (crt.sh, VirusTotal, Shodan, DNS, WHOIS, JA3 fingerprinting). No production traffic until you authorize a simulation in step 3.
2
OPI Score — Quantified Resilience per Asset
The Open Protection Index (OPI) scores each asset 0–100 across 6 components: Defense Coverage, L7 Resilience, L3/L4 Resilience, Protocol Resilience, Operational Readiness, and Evasion Resistance. Compare against 19 industry benchmarks.
ddactic.net/dashboard > Overview
Defense Coverage (20%)62
L7 Resilience (25%)38
L3/L4 Resilience (15%)71
Evasion Resistance (10%)29
Industry benchmark (Fintech): avg OPI 61 — acme.com is 7 points below sector average
For CFOs / Risk: OPI gives you a number to bring to the board — below your sector average means material risk exposure. After hardening, OPI re-scores to show progress. Track it quarterly.
3
DDoS Simulation — 101+ Vectors, Live Telemetry
After domain-ownership verification and your written sign-off, the simulation fires vectors your defenses actually face: HTTP/2 Rapid Reset, HTTP/3 QUIC, fingerprint-diverse WAF bypass, API exhaustion, L3/L4 volumetric — from 24 cloud providers under C2 telemetry with a kill switch.
ddactic.net/dashboard > Testing
Active simulation
HTTP/2 Rapid Reset • WAF Bypass • Medium
STOP
Active bots
75
across 8 regions
Req/sec
142K
peak 198K
WAF blocks
61%
39% slipping through
Elapsed
4:32
of 10:00
Vector timeline
Ramp-up— Sustained —Wind-down
For Engineers: Each simulation fires vectors matched to what recon found — WAF bypass patterns if a WAF was detected, API exhaustion with real OkHttp fingerprints if an API gateway was found. Not a generic flood; a targeted test.
4
AI Hardening Copilot
After the simulation, the AI copilot surfaces per-finding remediation recommendations in plain language. Ask it anything about your posture, request a step-by-step fix, or ask it to apply the change to your Cloudflare, F5, Azure, or AWS config directly.
ddactic.net/dashboard > Guide
You: Why is my L7 score only 38? What should I fix first?
DDactic AI: Your L7 score is pulled down by two findings: WAF bypass via chunked encoding (39% of simulated requests slipped through) and no rate-limit on your /api/auth endpoint. I recommend fixing the WAF bypass first — it accounts for 18 OPI points.
Ask a follow-up...
For CISOs: Every recommendation is grounded in what the simulation actually found — not generic best-practice. The copilot knows your vendor stack and generates remediation specific to Cloudflare, F5, Azure Front Door, AWS, GCP, or Oracle. Enterprise plans include named project threads per domain.
5
Vendor Remediation — Applied & Verified
Connect your Cloudflare, F5, Azure Front Door, AWS, GCP, or Oracle credentials once. DDactic reads your current config, proposes the change, applies it, verifies the OPI improvement, and can roll back in one click. Each applied fix earns simulation credits.
Each applied fix earns +1 simulation credit toward your next DDoS test run.
For Engineers: Every applied fix is non-destructive by default — DDactic reads your live config before writing, backs it up, and can roll back with one call. No config drift, no surprise changes.
6
Continuous Monitoring & Compliance Evidence
OPI drift alerts when new exposure appears — new subdomain, vendor change, config regression. The compliance pack bundles your simulation log, OPI score history, and remediation evidence into a ready-made evidence pack for DORA TLPT, PCI DSS 4.0, ISO 27001, or NIS2 auditors.
ddactic.net/dashboard > Overview
OPI trend
54 → 71
+17 after hardening
Last simulation
3d ago
Medium intensity
Credits remaining
18
of 25 this month
Drift alert — new subdomain detected
payments.acme.com resolved without CDN protection. OPI impact: −4 points. Review now
For CISOs: The loop is self-sustaining — hardening earns credits, credits fund the next simulation, simulation surfaces new drift, drift triggers remediation. No one-time audit; continuous assurance with a paper trail auditors accept.
Ready to see your real attack surface?
The free scan takes under 2 minutes. No signup required.
Most platforms scan from a single cloud. DDactic orchestrates 24+ simultaneously. Here's what makes it hard to replicate.
24+
Cloud Platforms
101+
Attack Vectors
6
Pipeline Stages
19
Industry Benchmarks
Multi-Cloud Fleet
Distributed Bot Orchestration
Deploy across AWS, GCP, Azure, Alibaba, Tencent, DigitalOcean, Vultr, Linode, Hetzner, OVH, Scaleway, IBM, Fly.io, IONOS, Exoscale, GCore, Civo, Serverspace, and Contabo. A single boot.sh auto-detects each platform via metadata endpoints. Spot instances auto-heal in under 75 seconds when reclaimed.
Proprietary 0-100 scoring framework across 6 dimensions: Defense Coverage, L7 Resilience, L3/L4 Resilience, Protocol Resilience, Operational Resilience, and Evasion Resistance. Compare against industry benchmarks across 19 sectors.
Device Labs
Physical App Interception
iOS (jailbroken), Android (rooted), and 44 Windows desktop apps scanned via MITM proxies. Discovers API endpoints, WebSocket connections, and gRPC channels invisible to web-only scanners.
Each component is individually achievable. The moat is the integration: 24+ cloud APIs, 13+ intelligence sources, 5 L7 tools, physical device labs, self-healing spot fleets, and vendor-specific hardening, all working as a single automated pipeline.