DNS
Published records for the domain, plus names that appear in certificate transparency. Unconfirmed names are not treated as yours.
Free Exposure Snapshot · $0
A passive check of domain and email setup.
The Free Exposure Snapshot is $0. It is a passive, public-records-only check of one firm’s domain and email setup: DNS, TLS, email authentication, and the public website, with the limits written down. One domain you own, or are authorized to ask about. Qualified or referred requests. We prepare up to two a week.
What the snapshot includes
No login, no agent, and no look at internal systems. Uses third-party passive sources plus ordinary website requests and TLS handshakes. A name we cannot tie to the firm is listed as unconfirmed.
TLS
Whether an ordinary HTTPS request completes, the name on the certificate, and the expiry window. Not a cipher audit.
Email authentication
SPF, DKIM, and DMARC as published. These records say how receivers are asked to treat mail that uses your domain. They do not show that any such mail was sent.
Public website
What an ordinary visit shows: response, headers, and obvious publicly reachable names. Not an internal review.
Public mentions
Public references to tools or storage names. A mention is not proof a tool is in use, and it is not evidence of a leak.
Plain-English notes
A short list your IT contact can read in a few minutes. No vulnerability count. The limits are written in the report.
Request a snapshot
One domain per request. For qualified or referred requests. We prepare up to two snapshots a week and email the report when it is ready. See what the report contains.
What this is, and what it is not.
This is the Free Exposure Snapshot: a passive, public-records-only check with a timestamp and stated limits. It is not a vulnerability scan, a penetration test, or an audit. Public information is not evidence of compromise, a compliance failure, or an exploitable vulnerability. We do not log into your systems and we do not review internal networks. Uses third-party passive sources plus ordinary website requests and TLS handshakes. For a short read-only look at Microsoft 365, see the M365 Quick Check on the pricing page. For the full one-tenant review, see the Identity, Data & AI Security Review.
Why this is free
The snapshot draws on sources that are already public, plus an ordinary visit to the website. It shows the shape of a public-records note before anyone scopes a review. It is not a complete picture of the firm. A sample, using a fictitious firm, is on the sample snapshot page.
If you want a short look inside Microsoft 365, the M365 Quick Check is $750–$1,000: about a half day, read-only, with a short written report of the top risks. That fee is credited toward the Identity, Data & AI Security Review if the review is booked within 60 days. The review starts at $3,500. See pricing. If the snapshot is enough, we will say so.
Need a look inside Microsoft 365?
The M365 Quick Check is $750–$1,000: about a half day, read-only, with a short written report of the top risks. That fee is credited toward the Identity, Data & AI Security Review if the review is booked within 60 days. The review starts at $3,500 for one tenant (typically $3,500–$5,500). See pricing.
Book a 30-min scoping call