Find web and email configuration issues
Edge checks HTTPS, DNS, email authentication and web configuration signals, and 32 standard TCP ports plus up to 20 custom ports on up to four public origin addresses per hostname. Shared CDN/proxy addresses are marked as unassessed for origin port exposure. Every Edge finding is something anyone on the internet can reach, and software with actively exploited vulnerabilities goes to the top. Published vulnerabilities nobody is exploiting go on a collapsed watch list. If one starts being exploited, Torva re-scans the affected host right away and emails you whether it’s still there or already fixed. Sign off anything you’ve checked, such as remote desktop behind an MFA gateway, and it moves out of your to-do list until its review date. Edge also reads the version each open service reports and flags software with known vulnerabilities (CVEs), including ones CISA lists as actively exploited. Complete adds a weekly scan of all 65,535 TCP ports on your public addresses, so a forgotten admin page or remote desktop moved to an unusual port is found, and alerts you when a new port opens. Each finding explains the observation, its significance and practical next steps. Run a scan after a change and compare it with earlier results.
One domain included, room to grow
Website & Email is $30/month for one registered domain. Additional domains are $5/month each. Confirmed hosts within the verified domain can be added to its scope. Complete includes one registered domain; additional domains are $5/month each. Prices are in USD.
Verify ownership before a paid scan
Add the supplied DNS TXT record and verify it in your dashboard. Confirm the hosts you are authorized to scan. The free instant check is limited to publicly available DNS, certificate and header information.
Example: missing HTTPS security header
A report can identify an absent Strict-Transport-Security header and explain how to review HTTPS readiness before enabling it. The follow-up scan records whether the header is now present.
Read the practical guides to fixing missing security headers, investigating an exposed remote desktop port, and understanding shared IP addresses.
Graded by your weakest public system
Edge grades each public host and shows your domain’s grade as the weakest one, because a single exposed server is all an attacker needs. The dashboard shows the grade with its trend. Complete adds a combined Executive summary for leadership.
One issue per fix
Edge groups what it finds by the change that fixes it. Missing browser protections on your website (Content Security Policy, X-Content-Type-Options, clickjacking protection, HSTS) are one issue, because they’re one web-server change. FTP or Telnet reachable from the internet is high priority, since both send passwords in clear text. Outdated software is one issue per product, combined with any copies Core finds inside your network, and marked internet-facing.
Fix steps, and a hand-off to your IT provider
Each issue opens with why it matters, numbered steps and the affected hosts. Send it to your IT provider by email in one click, mark it in progress, or sign it off as verified or as an accepted risk.
Regulatory context, when relevant
Add FTC Safeguards Rule, HIPAA Security Rule, and NIST CSF 2.0 (General Security) references to your reports based on your selected reporting profiles.
Full coverage and limitations · See a sample report · Pricing