Enter a prospect's domain and get an outside-in security report in about 20 seconds: lookalike domains that can send email, every certificate in the public logs, SPF, DMARC and the domain's registration. It reads public data only, the same data an attacker sees, and needs no access to their systems.
The result is a page you can share by link for 90 days. On the MSP plan, the same checks run continuously for each client, with monthly PDF reports under your own name and logo.
What's in the report
| Section | What it shows | Why the prospect cares |
|---|---|---|
| Lookalike domains | registered lookalikes, their age, which can send email | fake invoices to their customers come from these |
| Certificates | every hostname from the public logs, expiry, renewals not installed | forgotten hosts and outages they haven't noticed |
| MX, SPF lookup count, DMARC policy | whether anyone can send email as them today | |
| Registration | expiry, transfer lock, public WHOIS details | the domain the whole business runs on |
Using it in a sales conversation
Scan only with the prospect's agreement, for example as part of a free assessment, and keep it about their risk, not your product. What lands best:
- One concrete finding. "Someone registered
acme-invoices.comthree weeks ago and it can send email" is more persuasive than a score. - Their DMARC policy.
p=noneor no DMARC means anyone can send email as them. It's quick for you to fix and easy for them to understand: see DMARC from none to reject. - A certificate that's close to expiry on a host they'd forgotten.
- What you'd do about it, in two or three steps.
Email template
Subject: What we found looking at acme.com from the outside
Hi Sam,
As discussed, we ran an outside-in check of acme.com using public data
only. Three things stood out:
1. acme-invoices.com was registered 3 weeks ago and can send email.
Domains like this are used for fake invoices to your customers.
2. Your DMARC policy is p=none, so mail pretending to be from acme.com
isn't blocked by Gmail or Outlook.
3. The certificate on vpn.acme.com expires in 12 days.
The full report is here: <link>
Happy to walk through it and what we'd fix first. 20 minutes this week?
After they sign
Add the domain to Nameward under the client and the checks run every few hours, with alerts to the channels you choose and a monthly white-label PDF for the client. See pricing for the MSP plan.