Safe scanning starts with verified scope

VulnerabilityScan verifies ownership, blocks unsafe targets, and keeps every finding tied to clear evidence.

Start freeView sample report
3 assets

Included free during your trial.

Guided setup

Clear workflow for your first verified domain.

Built around transparent, industry-standard risk signals

Every priority keeps its evidence visible.

CISA KEV
FIRST EPSS
CVSS
DNS
TLS
Exposure
Ownership
Evidence

Safe by scope. Transparent by design.

Authorization, target boundaries, and scan policy stay visible from setup through remediation.

Recorded authorization

Verify control of every target and preserve the requester, scope, and consent in an audit trail.

Bounded scan policy

Keep scans predictable with approved checks, request ceilings, schedules, and emergency stops.

Controls that begin before the first scan

A conservative external scan policy protects your organization, your customers, and the wider internet.

Verified ownership
Require DNS, hosted-file, or reviewed proof of control before an active scan begins.
Unsafe target blocking
Reject private, loopback, link-local, metadata, multicast, and rebound addresses.
Rate-limited jobs
Enforce request ceilings, concurrency limits, and emergency stops centrally.
Explainable evidence
Keep observed behavior and contributing priority signals attached to each finding.
Audit history
Record scope, policy, requester, consent, and status changes for every scan.
Tenant isolation
Separate customer data with least privilege, encryption, and explicit retention controls.
What you get

Everything needed to keep exposure under control

From safe scanning policies to audit-ready evidence, the essentials are included in every workspace.

Continuous coverage

Schedule recurring external checks across the assets your team verifies.

Asset coverage12 / 12
All verified assets monitored

Fast triage

Filter by severity, asset, exploit status, owner, and remediation state.

CriticalKEVPublic

Public administration interface

app.northstar.dev:8443

Predictable pricing

Pay for monitored assets you select—never for every domain discovery uncovers.

Monitored assets

12 of 25

Discovery never creates surprise charges.

Enterprise‑grade security

Ownership verification, scoped policies, audit trails, and tenant-aware controls are built into the workflow.

Verified
Scoped
Allowed

Exposure insights

Track asset coverage, open findings, remediation progress, and risk trends at a glance.

Open risk

7

−42%

Safe scan engine

Rate-limited, non-destructive templates run only against explicitly verified targets.

safe-baseline / job-1842
Target ownership verified
Private ranges blocked
24 approved checks loaded
Scanning HTTPS configuration…

Frequently Asked Questions

Clear answers about assets, safe scanning, reports, and billing.

General

Scanning and reports

Can't find what you're looking for? Contact our customer support team

Know what is exposed.
Know what is exposed.

Your first scan is one verified domain away

Three assets free for 14 days. No card required.

Start free