See what can be seen of your firm from outside, before you sign.
Cyber insurance applications ask about email authentication, multi-factor sign-in, backups and patching. Part of the answer can be read from outside by anyone. We show you that outside view first, so you answer with the facts in hand.
Attackers now use AI to read a firm from outside the way a search engine does: the website, directories, search results and what AI assistants say. We read it first, and every finding is human-verified before your assessment is released.
What an application asks, and what shows from outside.
Words on screen, no sound. Illustrative; no real firm is shown.
Read the transcript
- Your insurer already has questions about you.
- Do you use SPF, DKIM and DMARC? We read that from outside.
- Is multi-factor sign-in on? Partly: we see which sign-in pages answer.
- Are backups kept apart and tested? Not visible from outside.
- Is software kept up to date? Partly: what your website shows.
- Dated and checkable by anyone, your insurer included.
- The AI defense layer for businesses. Walk into renewal knowing what the questions will find. getleaktrace.com
What cyber applications ask, and what the outside view shows.
On 14 October, BleepingComputer reported Organizations across 150 countries: the way in was email made to look like it came from a trusted sender.
Do you use SPF, DKIM and DMARC? We read the records your domain publishes and say whether forged mail in your name is refused.
Is it on for email and remote access? We see which sign-in pages and remote access services answer on your website host. Whether multi-factor is switched on is answered from inside your firm, and the reading says so.
Are backups kept apart from your systems, and tested? Nothing outside shows this. We list it as a question to answer from inside your firm, not as a finding.
Is software kept up to date? We read the software and versions your website advertises, and its certificate dates, and name what to update.
Before the application, not after it.
The External Exposure Check. No access, no software, nothing to install.
The public surfaces anyone can see, an underwriter included: mail records, sign-in pages, website software, shared addresses in breach records.
The lead finding in your reading comes with a check anyone can re-run, and so does every finding in the paid assessment, which is human-verified before it is released.
With your broker, knowing what the questions will find.
The External Cybersecurity Assessment is your insurance renewal evidence pack:
- the outside questions insurers commonly ask, each with its evidence on your assessment page (a question no outside check can see is marked as one to answer from inside your firm, never guessed)
- forged-email protection where we reach your DNS host, one click per step
The Rules and Insurance Briefing puts each finding in the terms an application uses, and the Assessment Record dates what was open on the day.
Your evidence pack:
- an owner summary
- the technical evidence with the fix for every finding
- a rules and insurance briefing
- a dated assessment record
The insurer decides. You decide with the facts.
We do not set, predict or promise your premium, your terms, or whether a policy is offered. Your insurer decides those. What we give you is the outside view, dated, and the steps to change it.
A different job from the people you already work with.
Excellent at running your systems. We read what the outside world sees and give you the exact fix for each finding, with the check that proves it. Different job, and independent: we are paid by no one who sells the fixes.
Tries to break in and needs access. We are not a pen test: nothing attacked, nothing installed, no access given. We read only what is already public, from outside, and log into nothing.
It can feed your premium and eligibility, and we do not see it. We show you what anyone can see of your firm from outside first, in plain words, so you walk into renewal knowing your own answers.
On a paid assessment, our AI agents work your firm from outside, stage by stage:
- the Discover AI agent reads what your firm shows the public internet with fixed checks
- the Close AI agent gives you each fix and re-checks it from outside
- on monitoring fixed checks re-check every hour and every day
Every paid assessment is human-verified before release. After you buy, AI chooses follow-up checks, picks when to re-check from outside, and sorts new changes by which needs you first.
No AI agent can state a finding without a fixed outside check behind it.
The assessment comes with an AI security agent on your dashboard: ask it about any finding in plain English and it answers from your own firm's findings.
Our AI agents work from outside only. They never log in, never install anything, and never touch your internal systems.
The one change they can make, to your email records, happens only when you approve it.
Walk into renewal knowing what the questions will find.
The External Exposure Check: your outside reading, the openings a stranger can see on your firm today, with the proof for the lead finding. Read-only, from outside.