Full Security Snapshot

A passive, evidence-backed review of your internet-facing domains.

The Full Security Snapshot looks at your public footprint from the outside, the way anyone on the internet can. It is passive only: it observes DNS, TLS certificates and HTTP responses, and sends no attack traffic.

What it checks

• DNS: whether every domain and host in scope resolves. A host that doesn't resolve is either a scope mistake or a real DNS problem, and the finding says so.
• TLS certificates: certificates that are expired or about to expire.
• HTTP security headers: protective headers missing from your web responses, such as HSTS, Content-Security-Policy, X-Frame-Options and X-Content-Type-Options.

Every observation is kept as evidence, so the report shows exactly what was seen and when. Each finding names the rule (and rule version) that produced it, so results stay comparable as checks are added over time.

What you get

• Prioritised findings, each with the evidence it was based on, a confidence level and a rationale.
• Remediation guidance for each finding (and the full Remediation Pack on Essentials and above).
• A PDF report you can share.
• A baseline for continuous monitoring.

What you need

• At least one verified domain.
• An authorisation with the scan declaration accepted.

Price

€199 standalone. Included 1× per year on Essentials, per quarter on Managed and per month on vCISO. See Assessment prices.