I've spent a lot of time building security automation tools and eventually decided to turn some of that work into an actual SaaS.

It's called Ilax.

The basic idea is pretty simple. You add and verify your domain, and Ilax continuously looks at your external attack surface, discovers assets and services, runs security checks, and keeps the findings in one place.

I originally built it because doing the discovery and repetitive scanning part again and again gets old very quickly, especially when you're dealing with multiple environments.

I'm particularly interested in whether pentesters, small security teams, MSPs, or SaaS companies would actually find something like this useful.

It's live now at [https://ilax.io/\](https://ilax.io/)

I am working on the UI for now, to improvise it.

I'm not really looking for compliments. If you work in security, I'd genuinely like to know what would stop you from paying for something like this.

Pricing? Trust? Missing integrations? Too many existing tools already? Something else?

That feedback would probably be more useful to me right now than signups.

Palo Alto Networks CEO Nikesh Arora said on this week's Q4 earnings call that there's roughly $1 trillion of global cybersecurity debt that has to be modernized — infrastructure deployed 7-10 years ago that was never built to handle attacks moving at machine speed.

His point stands: you can't patch human-speed security tooling into readiness for an autonomous agent that discovers, decides, and acts in milliseconds. That's an architecture problem, not a patching problem.

Curious what this sub thinks — is the industry actually rearchitecting for agent-speed threats, or mostly repackaging existing tooling as "AI-ready"?