Ferrum Suite
A score leadership actually reads
Every scan rolls up into a weighted cyber health score and an A–F grade — one number your board, your clients, and your team can align on, backed by the evidence behind it.
External posture · scored A–F
Your cyber posture,
Your cyber posture,
measured in minutes.
Safe · passive · rate-limited · no account needed See pricing →
Ferrum Sentinel runs safe public checks — starting with DNS and email security on any domain, then TLS and HTTP headers on a domain you verify — and turns what it finds into an A–F cyber health score, prioritized findings, and clear remediation. No agents to install, nothing to deploy, no permission headaches.
Safe public checks only
No agents to install
Passive & rate-limited
Free preview, no account
Strict tenant isolation
Branded HTML & PDF reports
Not just a scan — an answer you can act on.
Findings that arrive already prioritized
Results are deduplicated and ranked by severity and exposure, each paired with plain remediation steps. You spend your time fixing what matters, not triaging raw output.
Reports you can send without editing
Generate branded HTML and PDF reports — posture trends, findings, and the action plan — and share them by link. Ready for a client, an auditor, or the next board deck.
Built to watch many domains at once
Schedule recurring scans, track posture over time, and manage every client from one MSP portfolio with white-label branding and an attention queue that surfaces what changed.
From domain to board-ready report in four steps.
-
01
Enter a domain
Type any domain into the hero field for an instant free public preview — no account, no card. Verify ownership to unlock deeper, authorized modules on a domain you control.
-
02
Run safe public checks
Sentinel runs only passive, rate-limited public modules — DNS, email security, TLS, and HTTP headers — and snapshots the structured evidence behind each result.
-
03
Get score + prioritized findings
Results roll up into a weighted cyber health score and an A–F grade, with findings deduplicated, ranked by severity and exposure, and paired with plain remediation steps.
-
04
Report & track
Generate a branded HTML or PDF report, share it by link, and schedule re-scans to watch posture trend over time and catch drift between checks.
Safe isn't a limitation — it's the whole point.
Ferrum Sentinel performs only passive, rate-limited, low-impact public checks — the kind anyone on the internet could run. Because every check stays external and non-invasive, you can scan any domain, including your clients', without disruption or sign-off headaches.
It never
- Exploits, or guesses credentials
- Brute-forces logins or floods a target
- Follows redirects indefinitely
- Scans private or reserved IP ranges
- Stores secrets or sensitive response bodies
- Tells scare stories or overstates findings
It always
- Stays passive & rate-limited
- Keeps every check external & non-invasive
- Separates confirmed evidence from inference
- Reports plainly: detected / not detected / appears to
- Stores evidence as structured metadata only
- Respects the target, by design
Start free in seconds. Go as deep as you need.
Free public preview
Any domain · no account
- DNS records, resolution & configuration signals
- Email security: SPF, DMARC & MX posture
- A–F cyber health score with headline findings
- Results on screen in seconds, rate-limited fair use
Free verified deepeners
Verify a domain you control
- Advanced TLS configuration grading
- Deep email auth — DKIM discovery, MTA-STS, key strength
- Security Headers v2 — CSP, cookies, security.txt (A–F)
- Prioritized findings with step-by-step remediation
Premium scanners
Your whole external surface
- Subdomain discovery & takeover detection
- Typosquat / lookalike-domain monitoring
- IP reputation, cloud-storage & exposed-service checks
- Vulnerable JS libraries & sensitive-file exposure
- Certificate-transparency monitoring with new-cert alerts
One scanner, the outcome each buyer needs.
SME owner
See where you stand in plain language, fix the few things that matter most, and show customers and insurers you take security seriously — without hiring a security team.
MSP & MSSP
Watch every client's posture from one white-label portfolio, let the attention queue tell you what changed, and hand over branded reports that win renewals — at portfolio scale.
IT consultant
Run a credible, repeatable assessment on any engagement, back recommendations with graded evidence, and deliver a professional report your client can act on the same day.
Simple packages. Safe checks on every tier.
Per organization, billed monthly or annually — annual saves you two months. The Free Preview needs no account or card; MSP / Partner is quoted to your client volume.
Showing monthly pricing.
Free Preview
Free
A safe, instant read on any domain's public posture.
Scan a domain free- Scan any domain — no account or card
- Safe, passive DNS configuration checks
- Email-security signals: SPF, DMARC & MX
- A–F cyber health score + headline findings
- Rate-limited fair use, results in seconds
Starter
$49$490/ mo per org/ yr per org
Verify your domain to unlock the in-depth safe-scan deepeners.
Start with Starter- Everything in Free Preview, plus:
- Verify one domain for in-depth scans, with team seats
- Advanced TLS configuration grading
- Deep email auth — DKIM discovery, MTA-STS, key strength
- Security Headers v2 — CSP, cookies, security.txt (A–F)
- Prioritized findings + step-by-step remediation
- Branded HTML + PDF report & alerts on new critical/high
Business
$149$1,490/ mo per org/ yr per org
Continuous monitoring across your whole external surface.
Choose Business- Everything in Starter, plus:
- Multiple verified domains & more team seats
- All premium scanners — subdomain, takeover, typosquat, IP reputation, cloud storage, vuln libraries, exposed services, sensitive files
- Certificate-transparency monitoring with new-cert alerts
- Scheduled scans, posture trends & daily/weekly digests
- Risk-based prioritization (KEV/EPSS) + remediation advisor
- Compliance & readiness views + signed evidence packs
- Shareable reports, scheduled exec reports, webhooks & integrations
MSP / Partner
Custom
Every client's posture, under one white-label roof.
Talk to our partner team- Everything in Business, plus:
- Unlimited client portfolio, parent-child management
- Attention queue surfacing what needs action first
- White-label branding on the portal & every report
- MSP roles with strict per-client tenant isolation
- Custom client volumes & integrations
- Priority partner support
Every check on every tier is safe, passive, and rate-limited by design.
The things buyers ask first.
Is this a penetration test or a hacking tool?
No. Ferrum Sentinel is a posture scanner. It runs safe, passive, external checks only — no exploitation, no credential guessing, no flooding, no access to private systems. It tells you what is detected and not detected from the public internet, then how to improve it.
Will scanning disrupt my site or services?
It is engineered not to. Every module is rate-limited, low-impact, and non-invasive — closer to a careful look-over than a stress test. It does not crawl aggressively, brute-force anything, or follow redirects indefinitely, and it skips private and reserved IP ranges.
Do I need permission to scan a domain?
The free preview runs safe public checks on any domain — the same information already visible to anyone online. To unlock the deeper modules on a domain you control, you verify ownership first, which keeps authorized, in-depth checks tied to the people entitled to run them.
What is free, and what is paid?
A free public preview runs DNS and email-security checks on any domain with no account. Verifying a domain unlocks free deepeners — advanced TLS grading, deep email authentication, and Security Headers v2. Premium adds subdomain, typosquat, IP-reputation, cloud-storage, vulnerable-library, certificate-transparency, exposed-service, and sensitive-file modules, plus scheduling, notifications, trends, reports, and the MSP portfolio.
Do you store sensitive data from my site?
No. Evidence is stored as structured metadata — headers, records, and findings — never secrets or sensitive response bodies. Even the sensitive-file check confirms exposure by signature without ever storing file contents.
Can I manage multiple clients from one place?
Yes. The MSP portfolio gives parent-child management across every client org, white-label branding on reports, role-based access for analysts and admins, and strict tenant isolation so each client's data stays separate. An attention queue surfaces what changed across the whole portfolio.
Stand your watch
See your posture this week.
Run a free public scan and get your A–F score in minutes — no account, nothing to install. Create an account to verify a domain, go deeper, and share branded reports.