Questions, answered.

It continuously monitors your domain trust posture: email authentication (SPF, DKIM, DMARC), DNS security, TLS and certificates, attack surface, compliance evidence and post-quantum readiness.

No. Monitoring is agent-less by default and runs from the cloud. The inline scan shows live results in seconds, and your first full monitoring scan completes within minutes of adding a domain. For deeper reach, optional cloud connectors and an internal agent are available on higher tiers.

Businesses that own public domains: SaaS companies, security and compliance teams, MSPs and agencies. In short, any team where a lapsed certificate or a spoofed email becomes an incident.

Yes. A REST API lets you pull findings, trigger scans and integrate with your own tooling. You generate and manage API keys yourself from the dashboard, under Login & security.

Yes. The Free plan monitors up to 5 domains continuously at no cost and gives you a unified Trust Score with your top findings. No payment details needed to start. Every new account also begins with 14 days of Pro included; after that it moves to Free automatically, with nothing charged.

Plans are monthly or annual subscriptions billed in EUR or USD, from Free at €0 to Growth at €599/mo. Enterprise is priced for your environment. The pricing page lists what each tier includes.

Yes. Upgrade or downgrade any time from your dashboard. Upgrades take effect immediately; downgrades apply at your next billing date.

Each name you add to monitoring counts once, whether it is a registered domain such as your-company.com or a single host such as api.your-company.com. Your plan sets how many names you can monitor.

Yes. The NIS2 Evidence Pack, Advanced CT, Certificate Auto-Renew and enterprise SSO are add-ons you can add to your plan. You only upgrade tiers when you need more coverage. Add-on prices follow your plan, so a smaller plan pays less. Brand Protection is not sold separately: it is included in Growth and Enterprise. Certificate Auto-Renew is included in Enterprise. Advanced CT pairs with Pro or above, because it builds on Certificate Transparency monitoring.

Yes. The partner program covers multi-client monitoring, per-client scoring and branded reporting. Reach out and we'll set up the right structure for your book of clients.

In the EU. Your account data, scan history and evidence never leave it. Monitoring runs from outside your network with nothing to install: we read what is publicly observable about your domains and, with the exposure scan on Pro and above, check whether risky ports answer on hosts under domains you have proved you own. The optional internal-discovery and auto-renew agents and the leaked-password audit script run on your own hosts and send us metadata or counts only; private keys and passwords never leave your servers.

Yes, on every certificate scan since 5 November 2026. We try a TLS 1.0 and a TLS 1.1 handshake and one offer of only 3DES and RC4, and close the connection after the server’s first answer. Nothing is sent beyond a standard hello. An endpoint that still accepts any of them is marked on its certificate row and costs one point in your Digital Trust Score, at most five for all your endpoints together.

Only in a narrow form, on purpose. We do not check servers against a CVE database: a version number alone cannot prove a server is exposed, because Debian, Ubuntu and Red Hat often ship the fix under the old number. We compare versions with the maker’s support calendar and, for a few widely reported flaws such as PHP2Shell, with the maker’s security release. On Pro and above, such a finding also names the maker’s CVE numbers, says whether CISA lists them as exploited in the wild (KEV) and how likely an attack is (EPSS), and is marked Confirmed when the SkyQon agent read the installed package, or Suspected when only the version the server announces is known. Each finding names its source.

Yes. Higher tiers produce signed NIS2 compliance evidence reports and score your estate's post-quantum (PQC) readiness with an exportable migration roadmap.

Yes, through the DORA Trust Center add-on. We assemble the technical evidence behind DORA for financial entities and their ICT providers: a shareable supplier-readiness trust page, Register of Information support and audit-ready exports. It produces the evidence your program needs; certification itself stays with your auditor.