Continuous external attack surface monitoring across DNS, email, TLS, and exposed services. One prioritised report, ready in minutes — no agents, no integrations.
From stale DNS records to spoofable email infrastructure — Resensor surfaces what attackers see when they look at your company.
Automatically enumerate subdomains, IP ranges, cloud assets, and exposed services. Resensor watches for changes and alerts the moment something new appears on your perimeter.
Full SPF, DKIM, DMARC, and MTA-STS analysis. Detect permissive records and spoofable policies before attackers exploit them.
Expiry alerts, cipher grading, chain validation, and deprecated protocol detection across every discovered hostname.
Identify RDP, SMB, SSH, admin panels, and database ports mapped to your asset inventory with geo-attribution.
Track posture improvement with historical scoring, audit-ready exports, and Board-level reporting built in.
No agents. No integrations. No complex onboarding. Enter your domain and Resensor handles the rest.
Provide your primary domain. Resensor automatically discovers subdomains, IP ranges, MX records, and all internet-visible assets tied to your organisation — no configuration needed.
Non-intrusive scanning across DNS, email headers, TLS certificates, open ports, and certificate transparency logs — building a complete external picture without touching your infrastructure.
Findings scored by severity and real-world exploitability. A single grade, per-category breakdown, and step-by-step remediation — ready to share with leadership the same day.
Every scan produces a single, Board-reportable score with category breakdowns. Built for engineers, readable by executives.
Scores reflect real-world weaponisability — a misconfigured DMARC record ranks higher than a theoretical banner grab.
Historical scoring gives your team a clear narrative for risk reviews, compliance evidence, and security roadmap conversations.
PDF, JSON, or CSV. Share a read-only link with stakeholders. Pipe findings into your SIEM or ticketing system via webhook.
Pulse covers one primary domain with standard-depth scans. Sentinel adds aggressive scanning, weekly automated re-scans, and coverage for up to five domains.
A full external security assessment across domains, email, TLS, open ports, and DNS — delivered as a single prioritised report.