Discover
Domains, subdomains, certificates, websites, services, email infrastructure, and relevant third-party exposure.
Continuous external monitoring
External security monitoring for your business
Track meaningful changes to public domains, email signals, websites, and internet-facing services. Internal safeguard verification and fixes are separate.
$249/month
Six-month initial term. Fixes are scoped separately.
What it does
Changes worth your attention.
The initial review establishes what is visible today. Ongoing monitoring looks for new assets, technology changes, trust-signal changes, newly exposed services, and vulnerability intelligence tied to what we observe.
What we track
- Public asset and technology changes
- Email-authentication changes
- Lookalike-domain alerts
- Newly exposed services
- Relevant vulnerability intelligence
- Material-change alerts and periodic summaries
What we watch
What is visible online.
Monitor
Meaningful changes to public assets, technologies, certificates, email controls, and lookalike domains.
Correlate
Observed technologies and infrastructure compared with current vulnerability intelligence.
Prioritize
A confidence-aware shortlist of items that appear to deserve investigation first.
How we prioritize
We sort signal from noise.
We review versions, conditions, authentication requirements, prerequisites, and uncertainty before recommending attention. Monitoring identifies what changed; it does not replace validation or remediation.
Observe
Identify the public technology or configuration signal.
Correlate
Compare it with current vulnerability and threat information.
Analyze
Review versions, conditions, prerequisites, and uncertainty.
Prioritize
Escalate the items that appear to deserve investigation first.
Questions owners ask
Straight answers.
Do we need to give you internal access?
Not for the external monitoring portion. It is designed around what is visible from the Internet. Internal verification can be scoped separately when it is needed.
Is this a vulnerability scan?
It includes ongoing observation and vulnerability correlation, but the goal is not a raw list of CVEs. We prioritize items that appear relevant to the observed environment.
Are fixes included?
No. Monitoring and implementation are separate so you can use your existing IT provider or request a defined improvement proposal.
What happens if something changes?
We explain the observed change, why it may matter, what remains uncertain, and the next validation step. Public visibility alone is not proof of compromise.