IT that grew over the years
Systems were added over the years, some long forgotten. The analysis lists what is still reachable from the internet.
The quick first step
This is what an attacker sees of your company
We assess your domain and IP address for externally visible security issues. You receive a PDF report with an assessment and a 30-minute discussion of the main findings.
34 checks on your domain and IP address No access to your systems Report in 5 working days
from 249 € excl. VAT · book instantly
When the analysis makes sense
Six typical situations from practice.
Website on WordPress or another CMS
Version, plugins and login page are often readable from the outside. We show what an attacker sees of it.
Your own servers on site
Mail, ERP or remote maintenance run at your site. The report shows whether any of it sits on the internet unintentionally.
Home office and remote access
VPN and remote maintenance are popular entry points. We check what answers there and how current it is.
Questionnaire from an insurer or client
Cyber insurers and large customers ask about the state of your IT. The report is documented evidence with a date.
Never checked from the outside
If nobody has done this yet, the outside view is the simplest way to find out where you stand. Check once, then you know.
What we check
34 checks across seven areas: active scans of your systems and research in public sources. Each area unfolds for the detail.
6Email & DNS Can someone send emails in your name?
- SPF: is it defined which servers may send for you
- DKIM: are your mails signed and is the key published validly
- DMARC: is there a policy against spoofed senders and does anyone read the reports
- MTA-STS and TLS-RPT: is encrypted delivery enforced
- DNSSEC: are your DNS answers signed against manipulation
- Name servers: zone transfer to the outside, redundancy and stale records
10Reachable services What answers from the internet? Forgotten systems, open admin access.
- Open ports on your IP address, reviewed in full
- Admin access from the internet: SSH, remote maintenance, interfaces of firewall, NAS and printers
- Databases and file shares that answer to the outside
- VPN endpoints and their version status
- Service banners and product versions visible to the outside
- Subdomains: full enumeration, including the forgotten ones
- Test, staging and legacy systems that are still online
- Orphaned DNS records pointing at third party cloud resources that can be taken over
- Connected devices on the line: cameras, building technology, controllers
- Cloud storage and shares without access protection
4Web configuration Is your website configured cleanly to the outside?
- Security headers: enforced encryption, protection against injected content and framing by third party sites
- Cookies: are they protected against reading and interception
- Exposed paths and files: version control, configuration files, backups, open directory listings
- Login and admin interfaces as well as recognisable system versions
4Reputation & credentials Are passwords for your domain sitting in leak collections? Do lookalike domains exist?
- Company addresses in known leak collections, with source and date
- Your domain and mail servers on block lists that cost you deliverability
- Typo and lookalike domains suitable for fraud mail in your name
- Certificates issued in your name, including ones you never ordered
1OSINT What is already in search engines and archives?
- Indexed content that should not be public: documents and directories in search engines, old versions of your site in web archives, credentials and internal names in public code repositories, usable details in the metadata of your PDF and Office files
3Encryption Is your encryption up to date?
- TLS versions and cipher suites: are outdated, attackable variants still offered
- Certificates: chain, issuer, remaining validity and coverage of all names
- Encryption of mail transport at your mail servers
6Vulnerabilities Are there known gaps in your reachable systems?
- Known vulnerabilities in the detected products and versions
- Comparison against the list of gaps demonstrably exploited in the wild
- Software without vendor support, for which no security updates exist any more
- Default and sample configurations left in place after installation
- Third party components embedded in your website with known gaps
- Misconfigurations that look harmless alone and form a path in combination
6 + 10 + 4 + 4 + 1 + 3 + 6 = 34 checks
What this analysis cannot do
The analysis checks from the outside. What is only visible from the inside, it cannot judge. That is exactly what the IT Check is for, and it covers all of these points:
- Phishing resistance of your staff
- Whether your backups actually restore
- Internal network and Active Directory configuration
- Microsoft 365 settings
- How ransomware would spread inside the house
- Workstation security: updates, virus protection, encryption
- Wi-Fi and separation of company and guest network
- Server room, backup power and fire protection
This page
External Security Analysis
- View from the outside, like an attacker
- No access to your systems needed
- 34 checks on domain and IP address
- Report in 5 working days, about 10 minutes of your time
from 249 € excl. VAT
Book nowThe full audit
IT Check
- Audit from the inside, on site at your company
- Over 100 checks in eight areas
- Light penetration test included
- Backup concept, user accounts, network, server room
- We check whether an outage would genuinely stop you
- Findings with an action plan within two weeks, presented in person
from 1.299 € excl. VAT · book a call
Go to the IT CheckHow it runs
Three steps, five working days.
-
You name domain and IP address
Two details are enough. We find the subdomains ourselves.
-
We scan and research
34 checks: active scans on your addresses and research in public sources. No login attempts, your business carries on as normal. Your security monitoring may raise alerts, and you get our source IP in advance.
-
Report and review
Within 5 working days of approval. You receive the PDF and we discuss it in 30 minutes.
Your effort: about 10 minutes
Legal and trust
These commitments are in writing in the scan approval before we start:
- We only check what you approved in writing
- We change nothing on your systems and try no passwords
- The report goes to you alone. No publication, no disclosure, no naming as a reference without your consent
- The data is stored encrypted in Austria and deleted after the review on request
- Based in Berndorf, Lower Austria. One contact with a name and a phone number
The analysis is not a full penetration test and not a security certificate. It shows the state at the time of the assessment. What you do with the findings is your decision.
Common questions
Will we notice anything?
Your business carries on as normal. Our scans only ask what your systems answer to the outside anyway, at normal pace and without load. There are no login attempts and we do not exploit any vulnerabilities. If you run security monitoring or protection software, the scan can trigger alerts there, just like a real attacker would. We share our source IP in advance so the alerts can be attributed. If everything stays quiet, that is a result for the report too.
What does the test say about my IT security?
It answers one question: does your business look like an easy target from the outside, waiting for an automated scan to come along, or does an attacker find nothing simple at your address. That is an important part of your IT security and a good place to start. What it looks like behind the door, meaning backups, user accounts, server room and network, is what the IT Check shows.
Is every subdomain assessed individually?
No. We look for which subdomains and addresses are publicly discoverable at all and list them in the report. What gets assessed is the domain and the IP address you release. So you see what is visible from the outside without it turning into an assessment of twenty systems.
How do I find my IP address?
Connect a computer to the company network and open icanhazip.com. What it shows is your public IP address. Most smaller businesses have exactly one. If yours has several, you will find them in your internet provider's customer portal or contract. If you are unsure, we are happy to help.
Is this legal?
Yes, with your explicit approval. Active scanning without the owner's permission would not be lawful. You release the domains and IP addresses that are to be assessed. At payment you already confirm that you are authorised to control them. Once the order reaches us we cross check the details against public registers and call you if anything is unclear. If something does not add up we run no scan and refund the amount.
What if nothing is found?
Then that is exactly what the report says, with evidence that the check ran. You hold a dated, documented outside view you can present to an insurer, a client or your management. In our experience though, almost every company has at least one forgotten system or a spoofable sender address.
What do you need for the analysis?
We only need the domain, the IP address and your approval. The report ranks the findings by urgency. On this basis, we can plan and implement the next technical steps in a focused way.
What happens to the data?
The report goes to you alone. We publish nothing, disclose nothing to third parties and do not name you as a reference without your consent. The data is stored encrypted in Austria and deleted after the review on request, at the latest after twelve months.
Terms such as attack surface, SPF or penetration test are explained briefly in the IT security knowledge base.
+43 677 61421703 · office [at] vetosec [dot] at · vetosec.at/contact/
