01 / TrustFlare Surface
See what you expose to the internet.
Surface finds the hosts and open services your asset list missed.
Same company domain. Not on your list: Nobody watches it. On your list: Checked.
Not on your list: Nobody watches it. On your list: Checked.
02 / Critical ports
You name the critical ports. Surface finds them first.
Choose what you fear most, like RDP or an open database. We guarantee to find it faster than anyone.
03 / Your speed
Surface scans only your assets, as fast as you need.
No time is lost on the rest of the internet. You set the speed and the load for each scope.
04 / Self-check
Surface checks itself against Shodan and Censys.
We compare our results with Shodan and Censys all the time. If we missed something, we tell you and find out why.
05 / Web and admin panels
Surface finds admin panels among hundreds of similar sites.
It tells the important services from look-alike web pages. Then it checks them for typical web vulnerabilities.
Open database
Reachable from the internet with no login.
Admin panel
A management login page that anyone can open.
Known vulnerability
The service version matches a public CVE.
06 / Custom checks
We add checks for your own unusual services.
Name a service that must never be public. If it ever answers, Surface finds it.
07 / Inventory import
Surface imports your asset inventory automatically.
Connect your CMDB, cloud accounts or asset lists. The scope stays up to date.
08 / Still open or back
Surface knows a problem that is still open from one that came back.
A problem that is not fixed stays one alert. A fixed problem that returns gets a new alert.
09 / Owners · For advanced teams
Each finding goes to the team that can fix it.
For teams with an asset inventory. We can help find asset owners automatically.
Surface
Finds the exposure
Owner
Fixes it
Surface
Checks the fix
10 / Expert hours
You choose how many expert hours you need.
Our experts review your findings and hunt shadow assets. Pick fewer hours to save, or more for stronger security.
Questions
A few things to know
Is this a pentest?
No. A pentest goes deep once. Surface watches all the time.
Do we install anything?
No. Surface looks from the outside, like an attacker.
Do you scan the whole internet?
No. Only the domains and ranges you approve.
Is scanning safe for production?
We agree the scope and the scan rate with you first.
Do we need our own analysts?
Not necessarily. You can run Surface yourself, including the hunt for shadow assets. Or our experts do it for an extra fee.
Try TrustFlare Surface
Your domains. One scan. A clear list.
Give us your main domains. We show what answers from the internet.