Scan your vendors.See what's exposed.

It is an external security rating built only from publicly observable evidence: DNS and email records, TLS and certificate health, HTTP security headers, and exposed infrastructure such as subdomains, open ports, and IP reputation. A domain starts at 100 and loses points for each observed risk, then gets a letter grade — A at 90 and above, B at 80, C at 70, D at 60, F below that. Every deduction carries a severity, a category, and the record it was read from.

No. Assessments run passively from the outside in. No agents, no code snippets, no access to your network, and no questionnaire for anyone to fill in.

It runs while you wait instead of going into a queue for someone else to answer. Evidence collection is capped at 90 seconds by design, so a slow or unresponsive target fails cleanly rather than hanging. Actual duration varies with the domain — how many subdomains it has, how its DNS and TLS respond, and how quickly the upstream data sources reply. We publish the ceiling rather than an average, because an average measured on our own test domains would not tell you anything about yours.

Yes. Assessments use only publicly observable information — the same external evidence an insurer, a customer, or an attacker can already see. Nothing touches the vendor’s internal systems.

That part of the assessment is marked not assessed rather than scored as clean. A missing signal is never treated as a passing result, so an unreachable domain does not come back looking healthy.

Your account, your portfolio, and your assessment results are stored in the EU — the database is in Frankfurt and the API serving it runs in Amsterdam. Assessments read only publicly available information about a domain, never your internal data. Your account supports two-factor authentication, and you can delete your account and everything in it whenever you choose.

Yes. Plans are monthly or annual, and you can cancel whenever you want. VAT is calculated at checkout based on your location, and there are no per-finding fees.