On this page
The assessment end-to-end, from purchase through every finding closed, with the monitoring decision where it comes up.
Purchase
Checkout completes the order. North American billing supported, with CAD or USD pricing depending on the card issued. Payment confirmation arrives within a minute.
What's included in the assessment →Confirmation and review
You receive an intake email within a minute confirming payment. Our checks run in the background: credential exposure in monitored breach databases, paste sites, domain impersonation, and the public infrastructure tied to your company. Every assessment is human-verified before it is released. No action required on your side.
Assessment ready notification
Subject: "Your assessment of [your domain] is ready." The email contains a permanent link to your assessment dashboard. Bookmark it. Opening it needs a 6-digit code we send to your email.
Find your assessment →Findings review
Findings are grouped by severity (Critical, High, Medium, Low). Each finding has a plain-English description and concrete remediation steps embedded inline. This is where you assess which items you can handle internally and which require specialist support.
Read findings and action items →Decide who makes each change
Every finding in your dashboard carries the exact change that closes it, with the command to verify it afterwards. Simple items (rotating a password, turning on multi-factor authentication, updating a DNS record) you can do yourself. Each fix can be emailed from its card, with its steps and the check that proves it, to any address you choose. The changes are made from our steps. The one exception is forged email: where we can reach your DNS host, the Fix forged email button switches protection on one click per step, in stages you confirm; where we can't, it gives you the exact records to paste.
The change is made
Each change is made from the exact steps on its card, in the order given. Mark it done and we re-check it from outside.
Mark fixed and reverification
Click "I've done this" on a finding once it's fixed, then click Reverify. We re-check the same source the finding came from. Status flips to Resolved (gone), Mitigated (historical record, credential rotated), or Still present with a note on what remains. Repeat per finding.
Reverify a finding after you fix it →Next steps
From here most customers do two things: work through the findings in the dashboard, each of which carries the change that closes it, and activate monitoring so new exposures are caught by the watch rather than at the next assessment.
Activate Monitoring →Other things you can do anytime
Available throughout the life of the assessment. Not steps you have to take in order; use them whenever you need to.
Download your documents
Your evidence pack: an owner summary, the technical evidence with the fix for every finding, a rules and insurance briefing, and a dated assessment record. Available from the moment the assessment is delivered.
Download your documents →Share evidence with an outside reviewer
Time-limited read-only link for your insurance broker, accountant, compliance reviewer, or a client's vendor-security contact. Most useful when an outside party asks for proof of your review (insurance renewals, compliance reviews, vendor questionnaires).
Share evidence with a reviewer →Send the Assessment Record
The one document written for the person you answer to: what was reviewed, when, what was found and what was closed, signed. Written for insurers, regulators and clients who ask for proof.
Use the Assessment Record →Did this answer it? If not, email [email protected] with the subject “Help”. A person answers within 4 business hours.