Continuous Exposure Monitoring
From €149 / month · billed monthly
Olga Pascal, CEO
A penetration test shows your security on the day it runs. With PHP2Shell, exploitation attempts began four days before the fix was published, and public exploits were in use within hours of disclosure. What protects you in that situation is knowing exactly which of your systems run the affected software and acting within hours.
Continuous Exposure Monitoring keeps an up-to-date inventory of your internet-facing systems, the software and runtime versions they expose, and alerts you when a critical vulnerability affects any of them.
Every month
- External scan of all hosts and domains in scope
- Inventory of exposed services, runtimes (PHP and others) and versions, with end-of-life flags
- Change report: new hosts, new open ports, version changes
- Short monthly summary with prioritised actions
When a critical vulnerability is disclosed
- We check whether it affects anything in your inventory
- You receive an assessment within your plan's response time: affected / not affected / needs verification
- A recommended fix and, if you want it, a fixed-price quote to apply it
What this is not
Monitoring cannot detect vulnerabilities that are not yet publicly known, and it does not replace a penetration test. It shortens the time between disclosure and action.
Plans
Starter
Subscription€149 / month
billed monthly
- Scope
- Up to 5 external hosts
- Critical-CVE response
- Assessment within 24 hours of public disclosure
SEC-CEM-S
Growth
Subscription€390 / month
billed monthly
- Scope
- Up to 25 external hosts
- Critical-CVE response
- Assessment within 12 hours of public disclosure
SEC-CEM-G
Custom
SubscriptionQuoted
billed monthly
- Scope
- 26+ hosts or internal assets
- Critical-CVE response
- Agreed SLA
SEC-CEM-C
Prices exclude VAT where applicable and are billed monthly by invoice; there is no online payment. Applying a fix is quoted separately.
Start monitoring
Subscription, billed monthly by invoice. Pick a plan, leave your email and name, and tell us how many external hosts are in scope. Nothing is charged on this site.
Prefer to talk? +373 22 843569
Related
Frequently asked questions
A pentest is a deep, manual test at a point in time. Monitoring is a lighter, continuous view of what you expose. Most clients use both: a pentest yearly or before major releases, monitoring in between.
Not for the external plans. Internal asset coverage is available on Custom.
Yes. Monthly plans can be cancelled with 30 days notice. No long-term contracts required.