Enterprise
Custom
Global coverage with policy controls.
- Unlimited domains
- Custom scan volume
- SAML/SCIM requirements consultation
- 365-day evidence retention
- Private internal scanning
Free security scan
Know what’s exposed.
Fix what matters.
See what is exposed—without installing agents. Follow your scan from verification to findings in one place.
Safe checks
Clear findings
No credit card required
Securing infrastructure on
AWS
Google Cloud
Azure
DigitalOcean
Vercel
Everything you need to stay ahead
OuterScope gives security, legal, marketing, and engineering teams a unified view of internet-facing risk—no more chasing spreadsheets.
Surface discovery
Understand your surface instantly
OuterScope inventories DNS, TLS, and HTTP footprints in minutes, highlighting risky hosts, unexpected exposure, and expired certificates before attackers notice.
Learn moreCoordinated reporting
Coordinate vulnerability reporting
Use guided disclosure workflows with evidence-backed context, remediation status, and audit-ready records tied to each verified finding.
Learn morePerformance guardrails
Prove performance resilience
Scheduled Lighthouse benchmarking follows your plan cadence so teams can monitor Core Web Vitals and enforce budgets from evidence.
Learn moreBuilt for every team
Security is a shared responsibility. OuterScope provides the right data to the right people at the right time.
Security Engineers
Stop chasing false positives. Get precise, actionable findings that verify risk before alerting your team.
- Automated Reconnaissance
- Verifier-First Analysis
- API & Webhook Integration
Developers
Fix security issues before they reach production. Scheduled monitoring highlights drift between scans.
- Early Detection
- Clear Remediation Steps
- Performance Benchmarking
Compliance Teams
Maintain an audit trail of your infrastructure's security posture without manual spreadsheet updates.
- Historical Evidence
- Change Tracking
- Unified Asset Inventory
Simple, transparent pricing
Start free, upgrade for power features, and scale with confidence as your surface grows.
Contact Sales for general questionsFree
$0
Kick-start visibility for personal projects.
- 1 monitored domain
- 4 scans per month
- Basic vulnerability reports
- 7-day evidence retention
- Public surface scanning only
Most Popular
Pro
$49/mo
Essential security for agencies & growing businesses.
- Up to 5 domains
- 20 scans per month
- Prioritized email alerts
- 14-day evidence retention
- Public surface scanning only
Business
$249/mo
Automated compliance for scaling teams.
- Up to 15 domains
- 60 scans per month
- API access & integrations
- 30-day evidence retention
- Private internal scanning
Enterprise and general sales
Contact Sales
Tell us about your public-surface program. We'll respond by the commitment shown after submission. This inquiry does not create an account, workspace, or login session.
Need SAML or SCIM? Share the requirement for a consultative review; this form does not promise feature availability or delivery terms.
Frequently asked questions
Can't find the answer you're looking for? Reach out to our support team.
Contact Support →What will I actually learn from a scan?
The free scan provides a high-level overview of your domain's public exposure: DNS configuration issues, TLS certificate status, basic security headers, and a Lighthouse performance snapshot. You'll see a summary of findings with severity ratings. To access detailed evidence, historical tracking, and remediation guidance, verify domain ownership and upgrade to a paid plan.
Is the scan safe for production systems?
Absolutely. OuterScope uses passive reconnaissance and read-only checks aligned with responsible disclosure standards. We never send exploit payloads, attempt authentication, or modify any configuration. It's the same visibility an attacker would have—but you see it first.
How is OuterScope different from vulnerability scanners?
Traditional scanners require agents or credentials and generate noisy reports. OuterScope monitors your external attack surface from the outside in, highlighting forgotten subdomains and third-party risks that internal tools can miss.
What happens if you find something critical?
Critical findings trigger alerts via your configured channels (email, Slack, or webhook). For verified vulnerabilities, the console supports a guided disclosure workflow with evidence context and remediation tracking.
Can I scan internal or private assets?
OuterScope focuses on your public attack surface by default. Private internal scanning is available on Business and Enterprise plans for private agents behind your firewall that report back securely without exposing internal infrastructure.
How do you handle my data and privacy?
Scan results are encrypted at rest and in transit. Evidence retention follows your plan: 7 days on Free, 14 days on Pro, 30 days on Business, and 365 days on Enterprise. You can request data deletion anytime, and we never sell data or share findings with third parties.
How does OuterScope help my team collaborate?
Free includes 3 seats, Pro includes 5 seats, and Business includes 25 seats with role-based permissions for shared triage. Sales can discuss custom Enterprise seat needs and SAML/SCIM requirements; availability and delivery terms are not implied.
How do paid plan evaluations work?
Self-serve Pro and Business upgrades use checkout links tied to the billing catalog. Enterprise evaluations include dedicated onboarding support, and Sales can confirm any evaluation terms before activation.
Ready to secure your entire surface?
Join forward-thinking security teams who trust OuterScope to find risks before they become incidents. No credit card required to start scanning.