Tools

Start with the public clues: domain records, mail posture, exposure signals, and the facts that end the vendor finger-pointing. If the result looks risky, confusing, or urgent, bring it to 3PS.

FIRST EVIDENCE Quick checks create the first evidence. Deeper dark-web and attack-surface reports require consent and a secure backend.

Tool 01

Domain Triage

Passive public check. No credentials required. No active scanning.

Checks the public DNS and mail records attackers, mail systems, and vendors see first: MX, SPF, DMARC, nameservers, and CAA.

Sample output example.com

MXFound

SPFPresent

DMARCWatch

CAAMissing

Shows web DNS, mail trust, nameservers, and certificate-authority clues in a copyable summary.

Tool 02

Exposure Snapshot

Passive public check. No credentials required. No active scanning.

A passive report of what a domain appears to expose: mail controls, HTTPS, TLS, security headers, reputation signals, and public service clues.

Sample output Exposure score: 82

HTTPSOK

HeadersWatch

ReputationClean

Public services3 clues

Turns public DNS, website, TLS, reputation, and host clues into what to validate first.

Tool 03

Email & Dark-Web Exposure

Runs only inside an authorized engagement, with consent and logging.

Breach and stealer-log exposure checks run through a 3PS engagement with logging, abuse control, and client consent. We pull the full picture and translate it into what is actually at risk and what to fix first.

Sample output 3 exposed accounts

Password fields2

Stealer clues1 alias

Emails stay masked in public views. The full list is handled under authorization.

Generate Exposure Report

Tool 04

Incident Router

Pick what is broken and how much it hurts. Get the evidence list you need before the next vendor call or leadership update.

Problem type Business impact

Sample route Backup failure, high impact

Escalate now. Capture restore target, backup set, error, last successful restore test, and business deadline.

Free checks now. The full picture when you call.

Public checks help you see the problem. A 3PS engagement adds consented client reports: critical findings, real exposure, and the next fix.

Dark-web exposureGenerate an Exposure Report for breached email, stealer-log, and domain exposure after verification or consent.
Header postureGenerate an Exposure Report for security headers and TLS issues translated into fixes a business owner can understand.
Attack surfaceGenerate an Exposure Report for external exposure inventory on approved domains and IPs using Shodan or Censys.
Reputation checkVirusTotal domain, URL, hash, and IP signals for suspicious artifacts.
Microsoft 365 postureGenerate a Readiness Report with Secure Score, risky sign-ins, risky users, domain posture, and mail-flow checks after admin consent.
3PS Lock stackBuild a stack quote for endpoint, email, server, network, firewall, identity, backup, and execution-control ownership.
SSL and uptime watchCertificate expiry, endpoint health, DNS drift, and change alerts.
Agreement On FileGet terms, authority, contacts, and an environment brief ready before the outage.
For MSPsUse 3PS as the senior escalation bench with a written no-poach promise.