< 60s
Scan Time
Full audit, start to finish
Interactive Demo — No Login Required
Find the attack paths
before attackers do
Upload any firewall config and get an instant security audit — 175 checks against CIS benchmarks, live CVE correlation, and automated attack path discovery. Results in under 60 seconds.
Simulated audit of a FortiGate 100F with 287 policies
crwlr audit — FortiGate-100F
$ crwlr audit --config FortiGate-100F.conf --checks all --threat-intel live
Parsing FortiOS 7.2.8 configuration…
Normalizing 287 policies across 42 interfaces…
Building zone classification map…
Checking IPS / AV / SSL / WebFilter coverage…
Running CIS FortiGate Benchmark v1.3 — 78 controls…
Cross-referencing CISA KEV + NVD + Fortinet PSIRT feeds…
Mapping attack surface — 8 zone pairs, 12 VIPs…
Tracing multi-hop attack paths…
Computing blast radius…
Score: 34 / 100
◆ 3 critical▲ 4 high■ 3 medium● 2 lowScore: 34/100
34
Posture Score
3
Critical
4
High
3
Medium
2
Low
Prioritized Findings
12 / 12- Recommended remediation
config firewall policy delete 47 end
175
Security Checks
CIS + CVE + attack paths
0 bytes
Config Stored
Parsed in memory, then deleted
5 vendors
Platforms
FortiGate · PAN-OS · Sophos · CP · ASA
That was a sample — now try yours
Run it on your firewall
Same depth. Same speed. Upload your real config — no credit card required.
How it works
01
Export
Download running config from your firewall management console.
02
Upload
Drag and drop. Config parsed in memory, then permanently deleted.
03
Audit
CIS benchmarks, CVE matching, attack paths, profile gaps, blast radius.
04
Remediate
Vendor-specific CLI commands. Track progress. Prove improvement.
Supported Platforms
Fortinet FortiGatePalo Alto NetworksSophos XG / XGSCheck Point R80+Cisco ASA