Website & Data Exposure Assessment

Fixed price $3,900

Website & Data Exposure Assessment

A broader assessment for businesses with multiple public-facing assets or more sensitive data — includes subdomain discovery, data leakage indicators, and a remediation roadmap.

What’s included

• Everything in the External Website Security Review
• Broader public attack surface review
• Subdomain discovery and exposure review (including dev/staging environments that shouldn’t be public)
• Public exposure and data leakage indicator check — search for leaked credentials, exposed documents, publicly indexed internal pages
• Search of public code repositories and search-engine results for leaked passwords, API keys and internal documents
• Lookalike domain check — registered domains imitating yours that could be used for phishing
• Observations related to domain-level exposure (DNS, email security records — SPF, DKIM, DMARC)
• Prioritized remediation roadmap — a phased plan over 30/60/90 days
• Written follow-up after remediation
• Light validation of selected remediated issues

Who is this for

• Businesses with multiple public-facing websites or brands
• Small SaaS companies with customer-facing infrastructure
• Firms handling more sensitive information (health, financial, legal)
• Companies that have grown quickly and suspect they have exposed assets they forgot about

What you’ll receive

• A comprehensive 20–30 page PDF report
• Subdomain exposure map and attack surface diagram
• Remediation roadmap split into immediate / short-term / long-term actions
• Email support for questions and a written follow-up after remediation
• Light re-validation of issues you’ve fixed

How long it takes

10–14 business days from scope confirmation.

Covered by the FTC Safeguards Rule? If you need these assessments every six months, see our FTC Safeguards Rule External Assessment plan.