> trust nothing. verify all.
AI-powered recon and vulnerability triage, built by 0x41.
01 / recon
Domain recon that does the analysis for you. Maps a domain's attack surface from public sources (subdomains, hosting, open ports, known CVEs), then uses AI to write a prioritized security report.
→ view on GitHub$ python monomi.py example.com --enrich --ports --ai [*] querying certificate transparency logs… [+] subdomains discovered [+] hosts enriched (ASN, provider, country) [!] open ports matched to known CVEs [+] AI report → reports/example.com.md
02 / triage
CVE triage in plain English. Pulls data from NVD and CISA's Known Exploited Vulnerabilities catalog, ranks what matters for your stack, and explains exploitability and business impact.
Paste a list or a scan export and get a ranked summary table.
Flags CVEs used in known ransomware campaigns, straight from CISA.
Describe your stack once; in-stack CVEs rank first.
> contact
Open an issue or reach out on GitHub.