CONTINUOUS ATTACK SURFACE MONITORING
Your attack surface changes every day. Know what changed before attackers do.
NO PASE continuously monitors your organisation’s internet-facing assets, identifying newly exposed services, infrastructure changes and potential security risks.
We only scan domains you prove you control. Your baseline is free and needs no card; you choose whether to activate monitoring afterwards.
Discover what your organisation exposes to the internet.
Subdomains, hosts, open ports, services, certificates and technologies, found from public sources and direct observation.
Detect new exposures and changes automatically.
Every 24 hours, each scan of a monitored domain is compared with the previous complete one.
Understand what needs attention, without unnecessary noise.
Changes are explained in plain language, the most security-relevant first. Changes that rest on incomplete evidence are held back, not reported.
WHY IT MATTERS
Exposure appears between reviews
Your external attack surface is constantly changing.
New cloud services, forgotten test hosts, renewed or expired certificates and DNS changes appear as your teams and suppliers work.
Traditional assessments can miss changes between reviews.
An annual penetration test or a quarterly review describes one moment. Exposure created the day after stays unseen until the next one.
Continuous monitoring helps you identify new exposure.
Seeing a change soon after it happens gives you time to confirm it was intended — or to close it before someone else finds it.
HOW NO PASE WORKS
From your domain to the changes that matter
The first complete scan establishes your baseline. Every later scan is compared with the previous one, so you see what changed instead of rereading everything.
- Domain
- Ownership verification
- Initial baseline
- Continuous monitoring
- Changes detected
- Actionable findings
- STEP 1
Discover
Add your domain and prove that you control it. NO PASE then maps what the internet can see: subdomains, hosts, ports, services, certificates and technologies.
- STEP 2
Establish your baseline
The first complete scan becomes your baseline: a timestamped reference of your external attack surface. The baseline is free.
- STEP 3
Monitor changes
With monitoring active, NO PASE scans again every 24 hours and compares each scan with the previous complete one.
- STEP 4
Prioritise findings
Each change is classified and explained — newly exposed services and new hosts first — so you can decide quickly what needs attention.
DIFFERENTIAL MONITORING
See only what changed
A full report lists everything. A differential lists what is new, what changed and what was not observed since the previous scan — the part that needs a decision.
What each comparison covers
- New and no longer observed subdomains and hosts
- Newly opened or closed ports, and newly exposed services
- Changes in detected technologies and their versions
- TLS certificate changes: new, replaced or self-signed certificates
- DNS record changes, including A, AAAA, CNAME, MX, NS, TXT, SPF, DMARC and CAA
- New, changed and no longer found security findings
- Changes to the HTTP security headers of your web endpoints
Not observed is not the same as removed: an asset can be unreachable during one scan and back in the next. A possible change that rests on incomplete evidence is held back instead of being reported.
Previous scan Latest scan
ILLUSTRATION · NOT A SCAN RESULT
- NEWSubdomainstaging.example.com answers for the first time
- NEWOpen port8443 now answers on api.example.com
- CHANGEDCertificatewww.example.com now uses a certificate from another issuer
- CHANGEDTechnologynginx 1.24 → 1.26 on www.example.com
- NOT OBSERVEDSubdomainold.example.com did not answer in the latest scan
PRICING
Simple pricing, per monitored asset
Your baseline is free. Monitoring is priced per monitored asset: your domain plus each subdomain we discover, or only the hosts you choose. You see the exact count and price before you pay.
Baseline
€0.00
per verified domain
Ownership verification and the first complete scan of your domain. No card needed.
Monitoring · Daily
€0.20
per asset per day
Billed daily for the assets you monitor. Cancel at any time.
Monitoring · 30-day prepaid
€3.00
per asset per 30 days
Billed in advance every 30 days. Renews until you cancel.
Example: 10 monitored assets cost €2.00 a day on daily billing (about €60.00 per 30 days), or €30.00 for 30 days prepaid. Every plan includes the same daily monitoring.
Full pricing and cost estimateSECURITY & TRUST
Who runs NO PASE, and how we handle your data
NO PASE is a service of CHECK 4 CYBER (C4C). Questions about the service, our scanner or your data: support@c4c.lu.
Ownership first
Nothing is scanned until you prove you control the domain — by DNS record, a file on your website or a link sent to an address at the domain.
A well-behaved scanner
Our scanner observes only what is publicly reachable: it sends no exploit, tries no password and submits no form. What it requests, and how to recognise it, is documented publicly.
What our scanner doesPayments by Stripe
Card details are entered on Stripe’s checkout page. NO PASE never sees or stores them.
Your data stays yours
Your reports and their history stay in your dashboard and can be downloaded as PDF, CSV and JSON. A read-only API serves your baseline data; differential data through the API comes with active monitoring.
Account security
An account must confirm its email address before it can verify a domain, and two-factor authentication (authenticator app) is available to every account.
Questions
What does NO PASE do?
NO PASE maps what your organisation exposes to the internet — subdomains, hosts, services, certificates and technologies — and then monitors it: every 24 hours it compares a new scan with the previous one and tells you what changed.
What do you scan, and with what permission?
Only domains whose control you have proven, by a DNS record, a file on your website or a link sent to an address at the domain. The scan observes what is publicly reachable; it does not log in, exploit or submit anything.
What is the baseline, and why is it free?
The baseline is the first complete scan of your domain: the reference that later scans are compared with. It is free so you can see your exposure before deciding to monitor it.
How often do you check for changes?
Monitored domains are scanned every 24 hours. A change is reported only when both scans were complete enough to compare; something not seen in one scan is reported as “not observed”, not as removed.
How is the price calculated?
Per monitored asset: your domain plus each subdomain we discover, or only the hosts you choose to monitor. You see the exact asset count and price before you pay, and you can cancel at any time.
Is NO PASE a vulnerability scanner?
Not primarily. NO PASE maps exposure and tracks change. Where a detected technology version matches a published advisory, NO PASE reports it together with the evidence the match rests on.
Start monitoring your domain
Verify a domain you control and get its free baseline. Then activate monitoring and know what changed, on which assets and why it matters.
Already have an account? Sign in