DIGITAL REPORT
External Exposure Report ($100 Check)
One domain, one fixed-scope report: what you're exposing to the internet, and what to fix first. A senior operator reviews your public attack surface and hands you the written findings as a PDF.
$100 · one-time · digital report
Secure checkout via Polar (our merchant of record). You submit one domain at checkout.
What this is
A one-time, fixed-scope digital report. You submit one domain that you own or are authorized to review, and you receive a written external exposure report (PDF) covering what that domain and its public-facing footprint reveal to anyone on the internet. This is a passive, external review built from publicly available information — no login to your systems, no changes to anything you run.
You get a document, not a meeting. No sales math, no filler.
What's in the report
- Exposure summary — the public-facing footprint tied to your domain: subdomains, hosts, and services that are reachable from the internet.
- Surface inventory — technologies, exposed services, and open ports observable from the outside.
- Posture findings — misconfigurations and exposure issues visible externally (e.g. TLS/cert hygiene, exposed admin or dev interfaces, email/DNS records like SPF/DKIM/DMARC, leaked metadata).
- Prioritized fix list — findings ranked by real-world exposure, each with a plain-language "why it matters" and a concrete remediation step. Impact first, not a raw list.
- Scope statement — exactly what was reviewed and what was not, so the report stands on its own.
Every finding is hand-written and verified, not a scanner dump — and it's all observable from public data, so you can check it yourself.
Turnaround
Delivered within 3–5 business days of a valid, authorized submission.
Delivery
Digital only. The finished report (PDF) is delivered by email / download link to the address on your order. Nothing is shipped.
What this is NOT
- Not access to your systems and not any change to them — external, public-data review only.
- Not an ongoing service, retainer, or subscription — one order, one report.
- Not a review of anyone else's assets. One domain, and it must be yours or authorized to you.
In scope
- One (1) domain you own or are authorized to review.
- Publicly available information and externally observable properties of that domain.
- Passive, external review — public records, DNS, certificates, exposed service banners, public metadata.
- A written findings report (PDF) with a prioritized remediation list.
Out of scope
- Any access to, login to, or modification of your systems, accounts, or data.
- Assets you do not own or are not authorized to review.
- Any third-party or shared infrastructure you cannot authorize on your own.
- Ongoing monitoring, retainers, or repeat reviews (this is a one-time report).
- More than the one submitted domain (additional domains = separate orders).
Authorization required — please read before ordering
By purchasing, you confirm that:
- You own the domain and associated public assets you submit, or you are explicitly authorized by the owner to request an external review of them.
- You are requesting this review of your own / authorized assets only, and you will not submit any domain or asset you are not entitled to have reviewed.
- The review is limited to publicly available information and externally observable properties of the submitted domain — it does not include access to your internal systems or accounts.
- You are the party ordering, and you accept delivery of the report as a digital document.
Orders that do not include a valid, authorized domain — or that submit assets belonging to a third party — will not be fulfilled, and the report will not be produced. Submit your domain at checkout (or reply to the order confirmation) so the review can be scoped to the correct, authorized asset.
One domain, one report. Delivered as a PDF in 3–5 business days.
Terms, refund & delivery
- Terms. This is a one-time purchase of a fixed-scope digital report for a single domain you own or are authorized to review. Ordering constitutes acceptance of the authorization terms above. Payment is processed by Polar as merchant of record; Polar's purchase terms also apply.
- Delivery. Digital only. The completed report (PDF) is delivered by email / download link to the address on your order, normally within 3–5 business days of a valid, authorized submission. Nothing physical is shipped.
- Refund. Because this is a bespoke digital report prepared to order, once work on your report has begun the order is non-refundable. If you have not yet submitted a valid domain, or if we determine the request cannot be fulfilled (for example, an unauthorized or invalid domain), you receive a full refund. Questions about a specific order: email [email protected].