Compare · The outside watch for your firm
An outside reading or a penetration test.
A penetration test tries to get in. We read what your firm shows the internet and nothing is attacked.
No loginNo installNo mailbox accessOne dated record
01 · Side by side
What each one is.
| A penetration test | LeakTrace | |
|---|---|---|
| What it does | Testers try to get in, under a signed scope, to show what an attacker could reach. | We read what your firm shows the internet. Nothing is attacked, tested or got past. |
| What it needs from you | Often accounts, network access or a person on site. | Your domain and a work email at it. No login, no install, no mailbox access. |
| How often | A point in time, often once a year. | Re-checked from outside until each finding is closed. On monitoring: Email settings re-checked every 5 minutes, new certificates for the domain and its look-alikes seen within minutes, the rest every hour or day. |
| What you get | A report of what the testers reached. | Every finding with its evidence, its date and the exact fix. |
| Who it is for | Firms with systems to test and people to act on the report. | Professional firms with a domain, a website and a mailbox, but no security team. |
| The fix | Recommendations in the report. | The exact fix for each finding, step by step. Forged email closed with you, one click per step, where we reach your DNS host. |
02 · Where each fits
When each is the right choice.
A penetration test looks at what is inside, on the day. We read what is outside, all year.
If a contract or a regulator asks for a penetration test, you still need one. Our record is not a penetration test and does not replace one.
03 · What we never do
Security that never needs the keys to your firm.
We hold no keys to your firm.
We are paid by no one who sells the fixes, so every finding is there because it is true.
- NoNo login to your systems.
- NoNothing installed on your machines.
- NoNo access to your mailboxes.
Check my firm
See what your firm shows the internet, without handing over a key.
Your domain and a work email at it. No password, no login and no software. Read-only and sent only to your work email.
Read next
An outside reading or your insurer's scanWhat your insurer reads from outside and what you get from usRead → An outside reading or a DMARC serviceYour email records and the rest of what a forger usesRead → An outside reading or a cyber ratingA score, or each finding with its evidenceRead → An outside reading or dark web monitoringAn address found in breach data and what else is openRead → An outside reading or a review by an IT providerA review from inside, or a reading from outside with no keysRead → An outside reading or an incident response firmBefore something happens, or afterRead → Zero accessWhat we hold of your firm: nothingRead → What we coverEvery way in we find, with where our view stopsRead →