For teams answering security questionnaires & prepping SOC 2
Pass the security review. Close the enterprise deal.
A prospect just asked how secure you are. OuterProof finds what your domain exposes, explains it in plain English, and gives you the report to send back. No security team required.
Scan my domain — free See how it works
Results in about 30 seconds · no signup · passive, read-only checks only
Your subdomains, certificates, email and headers. Explained. Re-checked every day.
One simple platform for teams without a security specialist — discover, explain, prioritise, monitor.
External attack surface discovery
Enter your domain and OuterProof finds its subdomains in public certificate logs, then checks DNS, certificates, email authentication and security headers, including on hosts you’d forgotten you had.
Plain-English findings
Every finding is written in plain English: what’s wrong, why it matters to your business, and exactly how to fix it. Built for teams without a security specialist.
Email spoofing protection
Automated SPF, DKIM and DMARC checks catch the gaps that let anyone send email as your domain.
Scheduled monitoring
Your surface changes with every deploy. We re-check every day (every 6 hours on Growth) and email you when something new is exposed.
Security reviews decide enterprise deals.
“Before we can sign, we need to review your security.” Every enterprise deal reaches that sentence eventually. OuterProof means you already know the answer: what your domain exposes, what you fixed, and a dated report you can send back the same day.
Discover, understand, fix, monitor, prove.
Discover
We find every subdomain listed in public certificate logs and check its DNS, certificates and headers, including the ones nobody remembers deploying.
Understand
Each finding is written in plain English: what it is, why it matters, and how bad it actually is. No raw scanner output.
Fix
The exact change to make, with the record or config to paste. Most findings are a ten-minute job once you know which one to do first.
Monitor
Your external attack surface changes with every deploy. We re-check every day (every 6 hours on Growth) and email you when something new appears.
Prove
A dated report you can forward to an enterprise buyer or a SOC 2 auditor, showing what was checked, what was found, and what you closed.
Who OuterProof is for
B2B SaaS companies of 10–100 people, startups selling to enterprise, teams preparing for SOC 2, and anyone answering security questionnaires without a dedicated security team.
Pricing
Essential from $249/month for up to 5 domains. Growth at $599/month adds security-questionnaire support for teams selling to enterprise. Enterprise is priced to scope. See full pricing.