Domain and subdomain discovery
Included when relevant to the agreed scope and environment.
DOMINION FORTRESS / Cybersecurity / External Attack Surface Assessment
External Attack Surface Assessment
Map publicly observable assets and technology exposure to help organizations understand what an outside party can discover.
Request this service →WhatsApp →Email →What we cover
DNS and certificate observations
Included when relevant to the agreed scope and environment.
Publicly exposed services
Included when relevant to the agreed scope and environment.
Technology fingerprinting
Included when relevant to the agreed scope and environment.
Security-header and email-security signals
Included when relevant to the agreed scope and environment.
Prioritized exposure report
Included when relevant to the agreed scope and environment.
Our approach
- Scope the objective, systems and authorization boundaries.
- Review the environment and identify the highest-value paths to test or build.
- Execute the agreed assessment or engineering work with documented assumptions.
- Deliver practical outputs, priorities and next actions.
- Retest, iterate or implement follow-up work when required.
Methods and reference points
Applied where relevant to the engagement rather than used as a marketing checkbox.
Applied where relevant to the engagement rather than used as a marketing checkbox.
Applied where relevant to the engagement rather than used as a marketing checkbox.
What you receive
Clear scope
Defined systems, assumptions, responsibilities and boundaries before work begins.
Evidence-led outputs
Findings, technical observations, implementation outputs or recommendations are documented around the agreed scope.
Prioritized action
Outputs are organized so teams can distinguish urgent issues from lower-priority improvements.
Follow-through
Retesting, implementation and additional engineering can be scoped when appropriate.
Confidential client work
Much of our client work is confidential or subject to NDA. We therefore do not publish private client names, screenshots, vulnerabilities, credentials, internal architectures or sensitive engagement details merely to create a public portfolio.
Where disclosure is permitted, we can provide relevant evidence or discuss representative experience privately during qualification.
Who this is for
Startups, SaaS companies, growing businesses and organizations that need a focused external attack surface assessment capability and want the work scoped around their actual environment rather than a generic package.
Frequently asked questions
Can you work internationally?
Yes. Remote international engagements can be scoped where the required access, authorization and project conditions permit.
Do you provide a fixed package?
Scope depends on the systems, objectives and depth required. We prefer to size the engagement against the actual problem rather than sell unnecessary work.
Can I start with a smaller assessment?
Yes. A narrowly defined first engagement can be appropriate when you want to validate the risk, workflow or technical fit before expanding.
How is sensitive information handled?
Access and testing boundaries are agreed before authorized security work. Confidentiality requirements can be included in the engagement process.
Ready to discuss the project?
Send the problem, scope, technology or desired outcome. You do not need to know the perfect service package before contacting us.
Start the project brief →Talk on WhatsApp →