Reveal exposure. Prioritize risk and remediation.
Level 1 gives you an independent assessment of your external attack surface. We review the agreed domains, publicly visible subdomains, certificates and web services, creating a documented view of your exposed systems and their visible technical dependencies.
We review the agreed DNS, certificate and TLS settings, alongside SPF, DKIM and DMARC email authentication. CAA, MTA-STS and TLS-RPT can extend the scope. DKIM checks use known or verifiable selectors.
We examine visible web configurations, HTTP headers and technologies for relevant issues. Reporting distinguishes configuration signals from confirmed vulnerabilities, and existing public information from direct, low-impact DNS, TLS and HTTP requests.
You learn which findings need attention first and why. Priorities reflect the affected service, reachability, available evidence and your business context, with specific recommendations for further assessment or remediation.
An independent external assessment with a written report, documented findings and a prioritized action plan.
Assessment is external, without signing in to applications or using exploit payloads.
You receive a written report in German or English with a clear summary and technical evidence. It covers affected systems, observations, sources, assessment times, actual coverage and prioritized recommendations.
Send a brief description through the enquiry form. We agree the systems, scope, timing and report in writing. Level 1 assesses systems externally, without application sign-in, exploit payloads or covert attacks. Exploitability, internal permissions and tenant isolation belong to a separate Level 2 engagement.
We agree systems, scope and timing in writing.
