OpenKAT is seen by many as 'just another scanner', and while that is 'also' true, its architecture and goals allow us to do things not many other tools allow users to do. In this talk, we'll explain how our scanning cycle works (and why that isn't the magic sauce), but more importantly how that feeds into the bitemporal normalized database on which all reporting, querying and deduction is build.
We'll show why OpenKAT gives you the ability to collect and maintain a digital twin of your infra, and how and why being able to proof the quality of that data fits into the upcoming legislative and compliance frameworks.