IntelsieveSign inSee what's exposed

Intelsieve External Exposure

Your external exposure, verified.

We find everything your company has facing the internet. An analyst reviews every finding before it reaches you.

See what's exposed

One domain, free. No card, no call.

For MSPs
$100/month
Up to two domains, everything included
An analyst answers
Not a ticket queue
Nothing to install
No agent, no questionnaire

Intelsieve External Exposure

Your external exposure, verified.

We find everything your company has facing the internet, check which exposures still need fixing, and flag the ones attackers are known to be exploiting in the wild against other companies. Every finding reviewed by an analyst before it reaches you.

See what's exposedFor MSPs
$100/month
Up to two domains, every finding verified
An analyst answers
Not a ticket queue
Nothing to install
No agent, no questionnaire

Every finding is reviewed before it reaches you.

False positives and findings that no longer apply are dismissed, with the reasoning recorded against them. Ask about any finding and an analyst replies, usually the same working day.

What we findUNVERIFIED

nginx flagged as vulnerable on its version string

web01.acme.corp · raised automatically, from the version number the server reports.

What reaches youNOT APPLICABLE

nginx flagged as vulnerable on its version string

The distribution backported the fix. Suppressed for this host, and it will not be raised again for this patch.

What we findacme.corp
db.acme.corpMySQL answering the public internet
Unverified
www.acme.corpAI provider API key published in web assets
Unverified
api.acme.corpSwagger documentation public on 3 hosts
Unverified
vpn.acme.corpCitrix NetScaler, exploited in ransomware
Unverified
web01.acme.corpnginx flagged as vulnerable on its version stringWhy it was raisedAutomatically, from the version number the server reports.
Unverified
What reaches youwith a verdict
db.acme.corpMySQL answering the public internet
OPEN
www.acme.corpAI provider API key published in web assets
OPEN
api.acme.corpSwagger documentation public on 3 hosts
OPEN
vpn.acme.corpCitrix NetScaler, exploited in ransomware
CLOSED 14 DAYS AGO
web01.acme.corpnginx flagged as vulnerable on its version stringReasoningThe distribution backported the fix. Suppressed for this host, and it will not be raised again for this patch.
NOT APPLICABLE

What you get

Discovery

Know everything you own that faces the internet

Domains, hosts, services and logins attached to your name, including the ones nobody remembers setting up.

Verification

Know which ones still need fixing

Every finding ends in a verdict, reviewed by an analyst: still needs fixing, already fixed, or doesn't apply to you.

Evidence

Know what you can prove

Closed verdicts carry their date. Hand the record to an insurer, a board or an auditor without rewriting it.

Findings

What we look for

  1. Your Attack Surfacehosts · services · software
  2. Continuous Discoveryautomatic, on a schedule
  3. Exposure Intelligencegrouped below

  1. Things you didn’t know were online

    Forgotten hosts, admin consoles, internal dashboards, status pages, API documentation.

  2. Things anyone can reach

    Exposed databases, cleartext services, unauthenticated endpoints, default credentials.

  3. Things that leak

    Source code, backups, configuration files, API keys, dependency manifests.

  4. Things being exploited right now

    Edge devices and VPNs, end-of-life software, actively exploited vulnerabilities.

  5. Things already compromised

    SEO spam, malicious redirects, subdomain takeovers.

  6. People

    Logins that still work. Employees and executives.

See what a finding looks like →

Two groups worth a closer look

Rare, and the reason the list is worth reading

Someone is already using your domain to serve their content

A few of the estates we monitor had subdomains serving gambling pages, SEO spam impersonating other brands, or malicious redirects. Nobody knew until we looked.

Newest exposure

Your AI stack is left unprotected

AI provider API keys on 1 in 19 companies we monitor.

Keys, MCP servers and model endpoints that nobody put behind a login.

How it works

Three steps, nothing to install

  1. 01Verify your domainWe email a code to your work address.
  2. 02We find what’s out thereAssets, exposed services and logins that still work. Nothing to install, nothing to configure.
  3. 03We tell you what needs fixingWhen the scan finishes you get the short list, in the order that matters.
  1. 01Verify your domainWe email a code to your work address.
  2. 02We find what's out thereAssets, exposed services and logins that still work. Nothing to install, nothing to configure.
  3. 03We tell you what needs fixingWhen the scan finishes you get the short list, in the order that matters.

Then nothing, until something changes.

Pricing

Free gives you the findings. Paid has an analyst validate them for you. Everything is included at every paid tier, apart from authenticated and agentic scans, which come with Business.

Free

$0/month
  • 1 domain, scanned weekly
  • Every subdomain found
  • 5 of them checked for exposures
  • Findings arrive unverified
Start free

Standard

$100/month
  • Up to 2 domains
  • Every subdomain checked, on your schedule
  • Every finding verified by an analyst
  • Alerts by email, Slack or webhook
Start Standard

Business

$250/month

Everything in Standard, plus authenticated and agentic scans, and three things delivered by a person.

  • Up to 6 domains
  • Authenticated scans
  • Agentic scans
  • An onboarding review. An analyst walks your first results with you.
  • A named contact rather than a shared inbox.
  • A quarterly estate review. An analyst looks at what has changed and what is drifting.
Start Business
Compare all plans

Free

The findings

Free

$0/month · 1 domain
  • Weekly scan
  • Findings arrive unverified
  • Self-serve
Start free

Paid

The findings validated by an analyst, with alerts

Standard

$100/month · up to 2 domains
  • Every finding reviewed by an analyst
  • Still needs fixing, already fixed, or doesn’t apply to you
  • Alerts when something changes
Start Standard

Business

$250/month · up to 6 domains

Everything in Standard, plus authenticated and agentic scans, and three things delivered by a person.

  • Authenticated scans
  • Agentic scans
  • An onboarding review. An analyst walks your first results with you.
  • A named contact rather than a shared inbox.
  • A quarterly estate review. An analyst looks at what has changed and what is drifting.
Start Business

Every domain includes everything underneath it: subdomains, hosts and services, however many we find. You are never billed for what we discover.

Unusually large estates need a plan that fits. We will tell you before you pay, not after.

Compare all plans

For MSPs and resellers

Monitoring more than six domains, or managing them on behalf of clients? Pricing is set by volume.

Talk to us

Questions

What people ask before they sign up

Who looks at the findings?

On Standard and Business, our security analysts review your findings to separate real risk from noise and highlight what deserves your attention. You are never left to interpret raw security data on your own.

How do you know the domain is mine?

You sign up with an email address at your company’s domain. We send a one-time code to that address, and you enter it to confirm you have access before we go any further.

Is the free security check safe to run?

Yes. The free check uses the same core approach as our paid assessment. It runs real security tests, including controlled attempts to confirm whether an issue can be exploited, but it uses only safe, non-destructive techniques designed to identify exposure without disrupting your systems.

Can I resell this to my clients?

Yes. If you are an MSP, you can offer external attack surface management (EASM) to your clients as part of your own services, giving them continuous visibility of their external attack surface without building the technology yourself.

Exposures found at machine speed. Confirmed by a person.

Start free with one domain. Nothing to install.

See what's exposedFor MSPs