Question 1

What is CyberShield CVA™?

Accepted Answer

CyberShield CVA™ expands to Continuous Vulnerability Assurance — CyberShield CVA™'s end-to-end program spanning 21 engines (100% catalog live) and 124 capabilities from attack-surface discovery through offensive testing, Zero-Day Validation, AI Assisted/Autonomous pentest, defensive validation, and GRC assurance. It is not a one-time vulnerability assessment and not 21 equally live specialist tools.

Question 2

How is CyberShield CVA different from CyberShield VAPT?

Accepted Answer

CyberShield VAPT Engine is the authorized offensive assessment workbench for web, API, host, and database targets. CyberShield CVA is the umbrella continuous assurance program that includes VAPT plus SAST, DAST, IAST, SCA, AI pentest, Zero-Day Validation, red/blue/purple team, WAF/RASP validation, and control proof.

Question 3

Does CyberShield CVA include AI pentest and Zero-Day Validation?

Accepted Answer

Yes. AI Assisted and AI Autonomous pentest run under RoE with platform scope correlators, a governed live-payload suite (including verified zero-day techniques), live-revalidated findings, and CyberShield VAPT DAST handoff. Zero-Day Validation provides a CVE/CWE technique repository with Live Feed bridge (CISA KEV / OEM), Sovereign LLM enrichment, Update Now across 7 channels, attack-type catalog, and verified technique handoff into AI pentest.

Question 4

Which engines are included in CyberShield CVA?

Accepted Answer

Twenty-one engines: CVA Foundation, DSAT, SAST, DAST, IAST, SCA/SBOM, VAPT, API Security, Cloud Security, Container/K8s, BAS, Red Team, Blue Team, Purple Team, WAF Validation, RASP Assessment, AI/LLM Security, Control Validation, Risk/GRC, AST Rollup, and the CVA Orchestrator — plus AI pentest and Zero-Day Validation console surfaces.

Question 5

What does Zero-Day Update Now cover?

Accepted Answer

Update Now refreshes seven continuous channels: CVE feed, techniques, Sovereign catalog, ZAP extensions, LLM enrichment, actionables percentage, and background activity health — so Zero-Day Validation stays current without manual scrape cycles.

Question 6

Does CyberShield CVA include mobile application security (MAS)?

Accepted Answer

Yes. Mobile Application Security (MAS) is in-scope: MASVS-aligned Android/iOS coverage and RoE-gated mobile VAPT, alongside web, API, cloud, container, OT/wireless, and infrastructure assurance.

Continuous vulnerability assurance across 21 engines.