Free · from public sources
What the internet
sees of you.
Send us your domain. Within five working days we send back what anyone can see of your organisation from outside: the services that answer, the devices that show themselves, the flaws attackers use against what you run, and whether your email can be faked. We read public sources only, so it needs no access and no call.
What the report covers
Attackers start from the outside, with the same public sources. The report shows you what they find first: six things, each with what we saw and where.
Your names on the internet
Subdomains listed in public certificate logs and DNS, and the addresses they point to. An old name that still answers is often a system nobody looks after.
What answers
Services and login pages that public scan databases have recorded on those addresses, with the software and versions they announce.
Flaws attackers already use
Any of those versions with a flaw on CISA’s catalogue of vulnerabilities used in real attacks, and the date it was added.
Devices that should not face the internet
Remote desktops, admin panels and VPN gateways, building and industrial controllers, and cameras that can be reached from outside.
Your email
SPF, DKIM and DMARC: whether someone else could send mail that looks as if it came from you.
Certificates
Certificates that have expired or are about to, and names in them that nobody seems to use any more.
How it works
Three steps, and nothing for you to install, open or approve.
You ask
From an address at the domain
Name the domain on the contact form, writing from an address at that domain. We send the report only to an address at the domain it covers.
We look
Public sources only
Public DNS, certificate logs, public scan databases and CISA’s catalogue. We do not scan your network or touch your systems.
You read it
A short report, in five working days
What we saw, where, and the three things we would fix first. A 20-minute call to go through it, if you want one.
What it does not see. Only what faces the internet, and only what public sources have recorded. It is no penetration test, and nothing inside your network shows in it. The free inventory reads what runs inside, on the systems and dates you name.
Ask for the report
Free, from public sources, within five working days. Write from an address at the domain you want looked at; the report goes only there.
- FreeWhat the internet sees of you. From outside, from public sources, in five working days.
- FreeInventory. What runs inside, read on the dates you agree. You keep the results.
- €9,500Assessment. Priorities, risks, a plan and a quote, for a fixed fee, excluding VAT, credited against the work that follows.