iDatasec
In developmentManaged security testing with a person behind it. It finds what an organisation exposes to the internet, checks it for known weaknesses, and turns the results into a short fix list that a named consultant reviews before the client sees it. Nothing is tested until the client has proved they own the domain and signed an authorisation for each target.
From exposure to a verified fix
- 01
Establish scope
You verify that you own the domain and sign an authorisation for each target. New discoveries stay outside testing until you approve them.
- 02
Find and prioritise
Asset, vulnerability and exposure checks come together in one findings list, with the evidence and confidence behind each result.
- 03
Fix and report
Assign the work, retest the fix, and take an executive or technical report from the same findings.
Four products, one path
Every product is delivered by a named consultant, and priced on application.
Exposure Snapshot · free
A one-page summary of leaked staff credentials and exposed systems, built from public sources only, with a 30-minute walk-through. No test traffic, so no authorisation is needed.
Security Baseline · one-off
A full outside look at everything you expose to the internet: discovery, vulnerability and certificate checks, executive and technical reports, a ranked fix plan and one retest.
Managed Essential · monthly
Weekly checks on one root domain, reviewed findings in the client portal, a monthly executive report and email alerts on new critical issues.
Managed Plus · monthly
Daily checks across up to five root domains, credential exposure monitoring, retests on request, a monthly review call, alerts and a quarterly board report.
What every client gets
- Permission first
- No active test runs until you have proved domain ownership and signed an authorisation for each target.
- Reviewed findings
- A person checks every finding before you see it, and each says whether it was confirmed or inferred from a version number.
- A short fix list
- The handful of fixes that matter, in plain language, with informational noise hidden.
- A named consultant
- One person who knows your systems and answers the phone.
- Gentle by default
- Scans are rate-limited and run from fixed addresses your team can recognise. Staff passwords are never stored or shown.