ComplianceLayer

Findings letter on Monday. Evidence package by Friday. That is the entire play. No war room, no consultant, no panic. Monday morning you get your own copy of the outside view. Monday to Wednesday you fix in severity order. Thursday you rescan: new grade, new timestamp. Friday the broker gets a package that reads clean to someone who has never opened a terminal. And the part nobody mentions: the paper trail you just built protects you, not just the client. Timestamped proof of what was found, when it was fixed, how it was verified. The pages below walk it beat by beat. Next renewal, have the letter's answer ready before the letter arrives.

cURL to graded JSON in about 60 seconds. One POST starts the scan. One GET returns everything: score, grade, findings, remediation steps. Plain JSON, no SDK required, though we ship those too. Wire it into your PSA. Generate the QBR slide from a cron job. Scan every client quarterly and file the reports before anyone asks. Free tier, key in 30 seconds, docs in the first comment. Build something.

An insurer started scanning every applicant from the outside. Ransomware claims fell 65%. Corvus, 2020. Non-invasive external scans on every applicant: exposed RDP, public-facing vulnerabilities, the things an attacker checks first. Findings shipped with the quote. Rescans ran quarterly. Published result: ransomware went from 26% of claims to 9%. Among scanned policyholders, ransomware entering through RDP hit zero in the measured period. Numbers like that spread. That is why your client's renewal now involves a scan nobody told you about, run on a schedule you don't control. The checks are not secret. Run the same categories on any client domain and hold the list before anyone else does. Source: Corvus data, reported by BleepingComputer. Link in the first comment, next to the scanner.

Domain in. Sixty seconds. Verdict out. Unedited. No agents. No credentials. No call with an account executive who says "great question." This is the entire product, in three frames, at real speed: the same outside-in look a risk reviewer gets. Fifteen modules in parallel. SSL, DNS and email auth, open ports, headers, breach exposure. Then a report you can hand a client without translating it first. We are a security scanner that would rather show you than book you. And yes, that is our own domain in the frames. Try it on a client domain. Link in the first comment.

Somewhere right now an MSP owner is reading a forwarded email that starts with "the carrier's scan identified the following" and ends with his best client asking if he actually knows what he's doing. He does. His stack is green. Nobody scanned the inside. The carrier graded the outside: the ports, the mail records, the certificates. Public information, read by a stranger, delivered as a verdict. You can keep finding out about these scans from your clients. Or you can be the one holding the list. Swipe. This is the whole afternoon, including the part where it turns.

Underwriters price cyber policies partly on what an external scan of the domain turns up: email auth, open ports, certificate hygiene. Your client finds out what was on that list when the quote arrives. ComplianceLayer checks the same categories in under a minute, so you find out first. Ten free scans a month.

More renewals now start the same way: the carrier scans your client's domain before quoting and comes back with a list. You should have seen that list first. ComplianceLayer runs 15 external security modules: SSL/TLS, DNS and email auth, open ports, breach exposure and returns an A-F graded report, typically in under a minute. No agents. No credentials. No sales call. 10 free scans a month. $99/mo for 1,000. Run one on a client domain and see what the underwriter would have seen. Link in the first comment.