How exposed is your organisation from the outside?
Our Quickscan shows you in minutes. One domain is enough.
An attack begins with a query
A service goes online, an access stays open, a certificate expires. Nobody decided any of it, it happened anyway.
The reachable internet is indexed continuously. Anyone looking for a weakness queries that index for every system a pattern fits. Yours comes back with it. This part of an attack is automated and takes minutes.
The Quickscan shows you the same surface, from the same public sources, without a single request to your systems.
What the Quickscan answers
Which systems are reachable from the internet?
Subdomains, IP addresses, ports, certificates
Do those systems carry known vulnerabilities?
Detected technologies, matched against the CISA KEV catalogue of actively exploited vulnerabilities
Can someone send email in your name?
SPF and DMARC
Are your employees' credentials in circulation?
Matched against known data leaks
Including control systems sitting in the open
What is reachable from the internet does not end at web servers and VPN gateways. Remote maintenance access and operator interfaces of plants regularly sit in the open because a rule was drawn too wide. The Quickscan also detects OT systems reachable from the outside.
We test and harden the systems of energy suppliers, rail operators and industrial companies. What the scan finds is rated by a team that knows what sits behind it.
How the score rates your outside surface
Every run ends in a value between 0 and 100, together with a grade. Three dimensions sit behind it.
Attack surface. What is reachable from the outside, from open ports and detected technologies.
Hygiene. TLS and certificates, email security through SPF and DMARC, DNS.
Vulnerabilities. Known flaws in the reachable systems, matched against the CISA KEV catalogue, plus credentials from data leaks.
Every run follows the same procedure. Two states can therefore be compared.
How the Quickscan runs
Enter your domain
In the form above, with an email address that belongs to that domain.
We check what you entered
We check whether the address belongs to the domain. Only then does a run start.
Scan
A few minutes, passive, on YekIntel, our own platform.
Results meeting
We go through the score and the findings with you and say which of them matter.
From the Quickscan to continuous monitoring
Quickscan
Do I have a problem?
Passive, without a request to your systems.
Subdomains, IP addresses, ports, technologies, certificates, SPF and DMARC, credential leaks, reachable OT systems. Score across three dimensions. Results meeting.
Free.
Deepscan
Where exactly and what first?
Controlled active testing, with your approval.
Exposed systems, services and vulnerabilities examined in detail, findings validated technically. As preparation for or an addition to a penetration test.
Monitoring
Does it stay this way?
The Quickscan, repeated.
The same check by the same procedure, so you see what has appeared since the last state.
And if it really is exploitable
Whether a flaw can actually be exploited, and what an attacker gains from it, is what the external penetration test establishes. By hand, service by service, with reproduction steps and a retest. The Quickscan and the Deepscan are a possible first step towards it, not a requirement.
What makes sense is shown by the result. The decision is yours. After the results meeting every next step is open, so Deepscan, pentest, monitoring or none of them.
The platform finds, the team rates
Our own platform
The Quickscan runs on YekIntel, our own platform, proven across tens of thousands of scans. Every run follows the same procedure, so two states can be compared.
Rated by people
Every Quickscan ends in a results meeting. The team holds OSCP, OSEP, OSWE and CRTO, and knows which finding adds up to a path in and which one is just a hit.
Vendor independent
We do not resell security products. What we recommend after the Quickscan follows your findings alone.
Quickscan or OSINT analysis
Both start from what is publicly findable about you. The difference lies in procedure and scope.
The OSINT analysis is manual and strictly passive. Beyond systems it covers people, roles, job adverts and published documents. Its result is connections, meaning which findings together add up to a way in.
The Quickscan is automated. It captures the technical outside surface, produces a score and can be repeated by the same procedure. The Deepscan adds controlled active testing, which an OSINT analysis does not contain. Monitoring turns the Quickscan into continuous observation.
Common questions about the Quickscan
The Quickscan is free, including the results meeting. What makes sense for a Deepscan or monitoring is something we settle in the intro call.
The Quickscan is passive and sends no request to your systems. In the form you confirm nonetheless that you may commission work for this domain. The result describes your systems and goes to you, so the attribution has to be right.
Before every run we check whether the address given belongs to the domain. Only then do we start. The Deepscan contains active testing, so it starts only with your written approval and inside an agreed window.
The Quickscan will not. It reads what is publicly available, and nothing of it appears in your logs.
The Deepscan will. It sends requests to your systems, controlled and inside the agreed window.
The results sit on systems in Germany. They go to the verified address and are discussed with you. Nothing is passed on.
The Quickscan shows what is visible from the outside and where a known vulnerability sits. A penetration test establishes whether it can be exploited in your environment, and what an attacker gains from it.
The Quickscan takes minutes and runs automatically, the test takes days and is done by hand.
No. We name the accounts affected so you can reset them specifically. Cleartext passwords do not belong in a result that is then passed around.
Certifications and memberships
One domain is enough.
Enter the domain whose outside surface you want to see. Add an email address that belongs to that domain. We check what you entered before anything runs. Then we come back to you with the result.