Ferrum Suite
A score leadership actually reads
Every full scan rolls up into a weighted cyber health score and an A–F grade — one number your board, your clients, and your team can align on, backed by the evidence behind it.
External posture · safe, passive checks
Your cyber posture,
Your cyber posture,
measured in minutes.
Ferrum Sentinel runs safe public checks. The free preview reads any domain's DNS and email security; the full check of your own domains adds registration, TLS and HTTP headers, and turns what it finds into a health score and grade, prioritized findings, and clear remediation. No agents to install, nothing to deploy.
Safe · passive · rate-limited · no account needed See pricing →
Safe public checks only
No agents to install
Passive & rate-limited
Free preview, no account
Strict tenant isolation
Branded HTML & PDF reports
Not just a scan — an answer you can act on.
Findings that arrive already prioritized
Results are deduplicated and ranked by severity and exposure, each paired with plain remediation steps. You spend your time fixing what matters, not triaging raw output.
Reports you can send without editing
Generate HTML and PDF reports — the grade, every finding, and anything that couldn't be checked — and, on Business, share them by private link. Ready for a client, an auditor, or the next board deck.
Built to watch many domains at once
Track posture across many domains and manage every client from one MSP portfolio, with white-label reports and an attention queue that ranks what needs action first.
From domain to board-ready report in four steps.
-
01
Enter a domain
Type a domain into the hero field for an instant free public preview — no account, no card. With a plan, add your own domain for the full check, then verify it to unlock the deeper modules.
-
02
Run safe public checks
Sentinel runs passive, rate-limited public modules — DNS, email security, domain registration, TLS, and HTTP headers — and snapshots the structured evidence behind each result.
-
03
Get score + prioritized findings
Results roll up into a weighted cyber health score and an A–F grade, with findings deduplicated, ranked by severity and exposure, and paired with plain remediation steps.
-
04
Report & re-check
Generate an HTML or PDF report and re-run the check whenever you like. Alerts tell you when a serious issue is new or comes back, and when a check that ran before no longer can.
Safe isn't a limitation — it's the whole point.
Ferrum Sentinel is designed to be safe: its checks are passive by default, rate-limited and low-impact, and they look only at what anyone on the internet can already see. Full checks are for domains you own or are authorized to assess, and the deeper checks run only on a domain you have verified.
It never
- Exploits, or guesses credentials
- Brute-forces logins or floods a target
- Follows redirects indefinitely
- Scans private or reserved IP ranges
- Stores secrets or sensitive response bodies
- Tells scare stories or overstates findings
It always
- Is passive by default & rate-limited
- Keeps every check external & non-invasive
- Separates confirmed evidence from inference
- Reports plainly: detected / not detected / appears to
- Stores evidence as structured metadata only
- Respects the target, by design
Start free in seconds. Go as deep as you need.
Free public preview
Any domain · no account
- DNS records, resolution & configuration signals
- Email security: SPF, DMARC & MX posture
- Headline findings with plain-language next steps
- Results on screen in seconds, rate-limited fair use
Verified deepeners
Starter and up · a domain you verify
- TLS protocol grading — legacy SSL/TLS version detection
- Deep email auth — DKIM discovery, MTA-STS, key strength
- Security Headers v2 — CSP, cookies, security.txt (A–F)
- Prioritized findings with step-by-step remediation
Premium scanners
Business and up · a domain you verify
- Subdomain discovery & takeover detection
- Typosquat / lookalike-domain detection
- IP reputation, cloud-storage & exposed-service checks
- Vulnerable JS libraries & sensitive-file exposure
- Certificate-transparency checks with new-certificate alerts
One scanner, the outcome each buyer needs.
SME owner
See where you stand in plain language, fix the few things that matter most, and show customers and insurers you take security seriously — without hiring a security team.
MSP & MSSP
Watch every client's posture from one portfolio, let the attention queue tell you what needs action first, and hand over reports under your own brand — at portfolio scale.
IT consultant
Run a credible, repeatable assessment of the domains your client authorizes you to assess, back recommendations with graded evidence, and deliver a professional report your client can act on the same day.
Simple packages. Safe checks on every tier.
Per organization, billed monthly or annually — annual saves you two months. The Free Preview needs no account or card; MSP / Partner is quoted to your client volume.
Showing monthly pricing.
Free Preview
Free
A safe, instant read on any domain's public posture.
Scan a domain free- Scan any domain — no account or card
- Safe, passive DNS configuration checks
- Email-security signals: SPF, DMARC & MX
- Headline findings + plain-language next steps
- Rate-limited fair use, results in seconds
Starter
$49$490/ mo per org/ yr per org
Verify your domain to unlock the in-depth safe-scan deepeners.
Start with Starter- Everything in Free Preview, plus:
- The full safe check of your own domains — DNS, email, registration, TLS & headers
- Verify up to 3 domains for in-depth scans
- TLS protocol grading — legacy SSL/TLS version detection
- Deep email auth — DKIM discovery, MTA-STS, key strength
- Security Headers v2 — CSP, cookies, security.txt (A–F)
- Prioritized findings, step-by-step fixes & drafted fix requests
- HTML + PDF reports & alerts on new high or critical findings
Business
$149$1,490/ mo per org/ yr per org
Nine premium checks on your verified domains, plus insurance and evidence tools.
Choose Business- Everything in Starter, plus:
- Up to 25 verified domains
- All premium scanners — subdomain, takeover, typosquat, IP reputation, cloud storage, vuln libraries, exposed services, sensitive files
- Certificate-transparency checks with new-certificate alerts
- Posture-change tracking & daily/weekly alert digests
- Insurance & NIS2-lite readiness checklists + checksummed evidence packs
- Shareable report links & an on-demand monthly executive report
MSP / Partner
Custom
Every client's posture in one portfolio, reported under your brand.
Talk to our partner team- Everything in Business, plus:
- Unlimited client portfolio, parent-child management
- Attention queue surfacing what needs action first
- White-label branding on every report
- Strict per-client tenant isolation
- Custom client volumes
- Direct contact with our partner team
Every check on every tier is designed to be safe, low-impact and rate-limited.
The things buyers ask first.
Is this a penetration test or a hacking tool?
No. Ferrum Sentinel is a posture scanner. It runs safe, external checks, passive by default — no exploitation, no credential guessing, no flooding, no access to private systems. It tells you what is detected and not detected from the public internet, then how to improve it.
Will scanning disrupt my site or services?
It is engineered not to. Every module is rate-limited, low-impact, and non-invasive — closer to a careful look-over than a stress test. It does not crawl aggressively, brute-force anything, or follow redirects indefinitely, and it skips private and reserved IP ranges.
Do I need permission to scan a domain?
The free preview reads the public DNS and email settings of any domain — information already visible to anyone online. The full check is for domains you own or are explicitly authorized to assess, and the deeper modules run only after you verify the domain with a DNS record, which keeps in-depth checks tied to the people entitled to run them.
What is free, and what is paid?
The public preview is free: DNS and email-security checks on any domain, with no account. Starter adds the full check of your own domains, reports and alerts, and — on a domain you verify — TLS protocol grading, deep email authentication and Security Headers v2. Business adds nine premium modules (subdomain discovery and takeover, typosquat, IP reputation, cloud storage, vulnerable libraries, certificate transparency, exposed services and sensitive files), alert digests, shareable report links, and the insurance and evidence tools. MSP / Partner adds the client portfolio.
Do you store sensitive data from my site?
No. Evidence is stored as structured metadata — headers, records, and findings — never secrets or sensitive response bodies. Even the sensitive-file check confirms exposure by signature without ever storing file contents.
Can I manage multiple clients from one place?
Yes. The MSP portfolio gives parent-child management across every client org, white-label branding on reports, and strict tenant isolation so each client's data stays separate. An attention queue ranks the clients that need action first.
Stand your watch
See your posture this week.
Run a free public scan and see your headline findings in under a minute — no account, nothing to install. Create an account to check your own domains in full, verify them to go deeper, and generate reports.