What the internet can see of you.
We start where an outside attacker starts: with your company name. We find your internet-facing assets, including the ones nobody remembers, and test the services on them as far as the rules of engagement allow.
- Price
- Set in your written proposal
- You receive
- An inventory of what is exposed, ranked findings with evidence, and fixes.
Scope, timeline and price in writing before any work starts.
What we test. From the outside in.
- 01
Discovery
Domains, subdomains, IP ranges and cloud hosts linked to your organization.
- 02
Exposed services
VPNs, remote desktop, mail, file transfer, admin panels and anything else answering on the internet.
- 03
Known vulnerabilities
Unpatched software and default or reused credentials, confirmed by hand rather than copied from a scan.
- 04
Email and DNS
SPF, DKIM and DMARC, and DNS records that could be taken over or abused for phishing.
Questions, answered.
01What if we do not know all our assets?
That is normal. Discovery is part of the test, and anything we find outside the agreed scope we report to you before we touch it.
Know where you stand before an attacker does.
Tell us what you want tested. We will come back with a scope, a timeline and a price.