External Attack Surface Assessment
We map what an attacker can see and reach from the internet, then hand you a prioritized list of what to fix first.
- Timeline
- About 3–4 weeks from scoping call to report
- Pricing
- Fixed scope, quoted after a short scoping call
What it is
A fixed-scope review of everything your company exposes to the internet: domains, public IP addresses, open services, email security, and leaked credentials. We find the openings first, then give you a fix list in priority order, written so both your IT staff and your leadership can act on it.
Who it’s for
- Manufacturers, defense suppliers, and medical device companies that haven’t had an outside review recently
- Companies answering security questionnaires from customers or primes
- Companies getting ready for CMMC or NIST SP 800-171
What’s included
- Discovery and mapping. Domains, subdomains, IP ranges, and the forgotten or unmanaged assets that usually turn up.
- Exposure analysis. Open ports and services, outdated software and known CVEs, TLS configuration, remote access (VPN, RDP, SSH, admin panels), and misconfigured cloud resources.
- Email and DNS security. SPF, DKIM, DMARC, MTA-STS, DNSSEC, and how easily someone could send email pretending to be you.
- Credential and data exposure. Employee addresses in public breach data (counts only; we don’t collect passwords), plus exposed code repositories and documents.
- Limited validation. Non-destructive checks to confirm a finding is real, only as agreed in writing.
What’s not included
- Denial-of-service testing
- Phishing or other social engineering
- Internal network testing
- In-depth web application testing (available as a separate engagement)
- Exploitation beyond proving an issue exists
- Compliance certification of any kind
What you get
- An executive summary for leadership
- A technical report with severity, evidence, and remediation steps for each finding
- An asset inventory spreadsheet
- A 60-minute walkthrough of the findings
- Optional: findings mapped to NIST SP 800-171 controls, to help you prepare (this is not a certification)
Timeline
About three to four weeks from scoping call to report. Testing happens only inside a window we agree on in writing.
What we need from you
- A signed agreement and written authorization to test
- Your domains and IP ranges
- Confirmation that you own or control each asset, plus permission from any third-party host where needed
- A technical contact we can reach during testing
- Any restrictions: systems to avoid, times to avoid
Your data
Everything we collect is stored encrypted with limited access. Raw data is deleted after a retention period we agree on, and we’ll confirm the deletion in writing if you ask.
Start with a short call.
Tell us what prompted the question. We'll tell you whether we can help and what it would take.