> For the complete documentation index, see [llms.txt](https://shellzerox.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://shellzerox.gitbook.io/docs/introduction/platform-overview.md).

# Platform Overview

An overview of SHELLZERO X's security scanning capabilities, agents, and development phases.

***

SHELLZERO X combines passive website security scanning with vulnerability intelligence and a developing network of specialized security agents. The platform is designed to help users understand their external security exposure and progressively expand toward continuous monitoring and assisted defense.

### Platform Components

| Component                  | Purpose                                                                       | Status         |
| -------------------------- | ----------------------------------------------------------------------------- | -------------- |
| Website Security Scanner   | Evaluates publicly observable website security configurations.                | Live           |
| Vulnerability Intelligence | Matches detected software versions against known vulnerability information.   | Live           |
| Domain and DNS Checks      | Reviews DNS, email security, subdomains, blacklists, and reachability.        | Live           |
| Security Reports           | Provides scan findings and printable reports.                                 | Live           |
| Sentinel                   | Rescans verified assets and reports changes.                                  | Running        |
| Hunter                     | Rechecks detected software against newly confirmed exploited vulnerabilities. | Running        |
| Guardian                   | Prepares firewall and WAF rules for approval.                                 | In development |
| Patch                      | Prepares remediation steps and configuration examples.                        | In development |
| Chain                      | Focuses on smart contract and wallet monitoring.                              | In development |

### How the Platform Works

SHELLZERO X follows a progressive security assessment workflow.

1. **Submit a domain:** Enter the website domain you want to assess.
2. **Run a passive scan:** The platform examines information publicly exposed by the website and its related domain configuration.
3. **Review findings:** Examine security grades, configuration issues, detected technologies, and relevant known vulnerabilities.
4. **Verify domain ownership:** Complete the available verification process to access additional checks for verified domains.
5. **Use monitoring capabilities:** Verified assets can be rescanned by Sentinel, while Hunter checks for newly confirmed exploited vulnerabilities affecting detected software.

The availability of monitoring and agent capabilities depends on the current platform status.

### Security Assessment Areas

The current scanner covers several areas of external website security.

| Assessment Area                | What It Examines                                                                                      |
| ------------------------------ | ----------------------------------------------------------------------------------------------------- |
| SSL/TLS                        | Certificate validity, hostname matching, key size, supported TLS versions, and related configuration. |
| Security Headers               | HTTP response headers associated with browser-side security protections.                              |
| Technology and Vulnerabilities | Exposed software versions and their matches against published vulnerability databases.                |
| DNS and Email                  | SPF, DMARC, DKIM, CAA, and DNSSEC status.                                                             |
| Subdomains                     | Public certificate records and potential subdomain takeover risks.                                    |
| Blacklists                     | Whether supported threat-blocking DNS resolvers list a domain as malicious.                           |
| Reachability                   | Redirect behavior, response time, IP ownership, and detected CDN or WAF infrastructure.               |

### Development Phases

SHELLZERO X is being developed in phases, with scanning providing the foundation for broader security capabilities.

| Phase   | Focus                                                                                                            | Status      |
| ------- | ---------------------------------------------------------------------------------------------------------------- | ----------- |
| Phase 1 | Website scanning, security checks, vulnerability matching, ownership verification, reports, and Telegram alerts. | Live        |
| Phase 2 | Expanded monitoring, change alerts, threat intelligence, server monitoring, and additional agent capabilities.   | In progress |
| Phase 3 | Approved WAF rules, guided patching, and incident playbooks.                                                     | Planned     |
| Phase 4 | Smart contract monitoring and wallet activity alerts.                                                            | Planned     |

### Important Limitations

* Passive scanning evaluates information that a website or domain publicly exposes. It does not establish that a system is free from vulnerabilities.
* Detected software versions and vulnerability matches may not always confirm that a vulnerability is exploitable in a particular environment.
* Additional checks may require domain ownership verification.
* Features marked as in development or planned should not be treated as currently available.
* Security response actions must not be assumed to be automatic. Planned defense capabilities are intended to retain user approval before changes are applied.

### Official Resources

* Website: <https://shellzerox.org/>
* X: <https://x.com/shellzerox>
* Email: <dev@shellzerox.org>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://shellzerox.gitbook.io/docs/introduction/platform-overview.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.