A fixed-price gap analysis, remediation through to your audit, and upkeep after it. All in a workspace you keep.
All compliance →Led by a published security researcher with five CVEs. One standard report, letters for your buyers, and retests of your fixes.
All security →To the people you sell to, raise from or answer to.
All industries →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →Enter a domain and see what anyone on the internet can see about it in a few seconds: whether its email can be spoofed, how its certificate and HTTPS hold up, and which browser protections are missing.
A domain or a web address. Passive checks only; nothing is scanned.
Yes. It only does what a browser or a mail server does: looks up public DNS records, opens one HTTPS connection and requests the home page once. Nothing is scanned, no ports are probed and no paths are guessed.
Everything it reads is public, so yes, and it is a quick way to look at a supplier. Testing beyond this, such as port scanning or a penetration test, needs the owner's written permission.
Without them, anyone can send email that appears to come from your domain, which is how most invoice fraud and phishing aimed at your customers starts. DMARC at quarantine or reject tells receiving mail servers to stop it.
Subdomains, other domains you own, cloud storage, open ports and the services behind them, and anything that needs a login. That is the inventory attack surface management builds and keeps current.
Yes, free and no signup. Results for a domain are cached for an hour.
Attack surface management finds the subdomains, cloud assets and services you forgot about, watches them for change, and tells you when something new is exposed. From $750/mo CAD.
See attack surface management Talk about monitoringNot ready for a call yet?
Your findings and the fix for each to keep, then a few short notes from Jacob on what attackers look at first. Unsubscribe in one click. Reply anytime; it reaches him directly.
From Jacob Masse, principal of traztech: the files by email, then a few short notes over the next month. No spam, unsubscribe in one click.
Want it done for you?
Attack surface management
Continuous discovery and monitoring of everything you expose to the internet.
Explore Attack surface management →This gives you the shape of the problem. traztech Workspace walks you through every control of whichever frameworks apply to you, in plain English, with an evidence register, policy templates, a risk register, vendor questionnaires, and an audit-readiness score. Start a free assessment and walk every control.
No credit card, no trial clock, no locked features. TrazTech makes money when someone wants help closing the gaps, not from the Workspace itself.