We check your company’s sites, servers and services, confirm the real threats and tell you what to fix first. First results in 10 minutes.
We look at the versions on your servers and give you a straight yes or no. Free, in 10 minutes.
One service finds the problems, filters out the noise and makes sure they get fixed.
Your sites, subdomains, ports and services, including forgotten and brand-new ones.
Every finding is safely checked; what is under attack right now goes on top.
An owner, a re-check after the fix, and a report at the end.
One service in place of a scanner, a findings spreadsheet and chat reminders.
The list updates itself when someone spins up a new server.
Exposed files, services with no password, leaked keys and outdated software.
Out of dozens of suspects we keep the ones that are really dangerous.
Findings land in Slack or Jira, the report goes to leadership.
Nothing to install: enter a domain and the check starts right away.
A typical scanner marks half your findings “critical”. We put on top what hackers use right now.
One customer’s story.
«We used to learn about our exposed services from strangers’ emails. Now we see them first and close them within a day.»
Watches your sites and warns you about new vulnerabilities in the software you run. Touches nothing.
Actively tests your defences, confirms vulnerabilities and follows them until fixed, with deadlines and reports.
Enter your domain and verify ownership with a DNS TXT record. signalfort finds subdomains, services and technologies, matches software versions against CVE and FSTEC BDU, and lists the vulnerabilities by priority. First results arrive in 10 minutes.
No. We look at your company from the outside, the way an attacker does, and check only what is reachable from the internet. No agents to install, no passwords to share.
A scanner hands you a long list of possible issues. We safely check every finding, keep the real threats and put on top what is already used in attacks, based on CISA KEV and EPSS.
Exposed .env and .git files, database backups, services with no password (Elasticsearch, Redis, Spring Actuator), leaked keys and tokens, outdated software with known CVEs, and TLS certificate problems.
Yes. Vulnerabilities are matched against FSTEC BDU, CVE, GHSA, OSV and EUVD, and reports for leadership and regulators come in FSTEC and CRA formats.
Radar is free: passive perimeter monitoring and a vulnerability feed for your stack. Active checks, confirmed findings and SLA come with the Contour plan, priced on request.
Free, and no access to your servers needed.