Attack surface monitoring for MSPs
Clients ask about security, and a full enterprise stack is overkill for most of them. ExposureWatch gives you a continuous external inventory per client, with plain-language alerts when something new appears.
What you get per client
- A baseline inventory: domains, subdomains, exposed services, certificate state, and DNS hygiene, mapped once and kept current.
- Change alerts: a new subdomain, a service that appeared on a port, a certificate that expires in two weeks.
- Breach exposure checks against licensed datasets, tied to the client's own domains.
- A QBR-ready summary you can paste into a client review.
Why MSPs resell it
- A security line item without hiring. You sell the outcome, not the pipeline.
- Alerts where you work. Email to a ticket address works with every PSA; push alerts to your phone through ntfy if you prefer.
- White-label ready. Per-client views and your branding on the MSP plan.
- Wholesale pricing that leaves margin at normal MSP markups.
Authorization and boundaries
Monitoring requires written authorization for every target, collected during setup. We do not touch anything you have not asked us to watch. This is external attack surface monitoring, not a penetration test, and we will say so when a client actually needs the latter.
How onboarding works
You send the client domains and a signed authorization, we map the surface within a day, and the baseline plus the first alerts land in your inbox. Setup is free while you evaluate it, and the MSP plan is priced for resale from the start.
Questions
Can I put my own brand on it?
Yes. The MSP plan includes per-client views and your branding, and you set the price your clients see.
Do I need to be a security expert to sell this?
No. Alerts are plain language with a priority, and the baseline summary is written for a client conversation, not a SOC.
Does this replace my RMM or EDR?
No. Those see inside the client's network; this sees the outside. They complement each other, and the outside view is the one a prospect can check before signing.
How does billing work for clients?
You get a wholesale price and bill clients however you already bill. We invoice you, not them.
Set up your first monitor free
Tell us the sources you check by hand. We wire them up, you get real alerts for two weeks, and you only pay if you keep it.