External attack surface assessment
See your attack surface,
before an attacker does.
SurfaceGuard maps everything your organisation exposes online: websites, servers, login pages and forgotten test environments. You get a clear report on what is wrong and what to fix first.
Useful as evidence for
- NIS2
- ISO 27001
- Cyber insurance
- Customer audits
How it works
From one domain name to your entire attack surface
It starts with your domain
You give us your main domain and sign the authorisation form. That's all we need.
We find what's attached to it
Through DNS, certificate logs and public sources we find subdomains and servers. Including the test environment nobody remembered.
We check what's open
For each system we determine which services can be reached from the internet: websites, VPN, management ports, mail.
And we tell you what's wrong
Every finding gets a severity, evidence and a fix. You see at a glance where to start.
What we examine
Six areas, one overview
Domains and subdomains
Through DNS, certificate logs and public sources. Including what isn't on your own list.
Reachable services
Which servers, ports and login pages are visible from the internet, and whether they should be.
Outdated versions
Identifiable software versions with publicly known vulnerabilities.
Certificates and TLS
Expired certificates, old protocols and weak settings.
SPF, DKIM and DMARC
Whether criminals can send email that appears to come from your domain.
Headers and leaks
Missing security headers, public directories and files that shouldn't be online.
The report
Readable for management, useful for IT
The first page gives a score and the three things that really matter. After that, each finding comes with evidence and a fix.
- Executive summary with a risk score
- Overview of all your online assets
- Per finding: severity, evidence and fix
- Action plan: this week, this month, this quarter
Example Company Ltd
assessment · page 1| Fix first | Severity |
|---|---|
| Update the VPN gateway to current firmware | critical |
| Close RDP on 203.0.113.27 | high |
| Take test.example-company.com offline | high |
Example data for illustration.
Pricing
Start with a baseline, or keep watching
Your attack surface changes every time someone launches a website or opens a port.
Assessment
A complete baseline of one main domain.
- Asset discovery
- DNS and certificate analysis
- Exposure overview
- Prioritised report
- Results review
Monthly monitoring
A new measurement every month, so you see changes right away.
- Monthly reassessment
- New assets and changes
- Monthly report
- Prioritisation of new signals
- Annual contract
Weekly or daily
For organisations with many assets or strict requirements.
- Higher monitoring frequency
- Faster alerts
- Tailored to asset volume
- Personal quote
All prices exclude VAT. Compare the packages →
Frequently asked questions
Good to know up front
Question not listed? Email klantenservice@nuvtek.nl.
Is it legal to scan my company?
Yes, with your permission. We only start once you have confirmed in writing which domains and IP addresses we may examine. Without permission we examine nothing.
Will my systems notice?
Barely. We look at what is publicly visible, at a gentle pace. We don't try to log in and we don't carry out attacks.
How is this different from a penetration test?
A pentest goes deep on a fixed scope and actively tries to get in. We look wider, find assets you didn't know about, and track them over time. Many organisations use our report to decide what to pentest next.
Does this help with NIS2?
NIS2 requires you to know and manage your risks and systems. A documented view of your external attack surface is good evidence for that, as well as for ISO 27001 and insurance questionnaires.
Know what's online about you
Request a no-obligation intake. We'll discuss your domains, the scope and what to expect from the report.