Request access
● Opening by invitation · External cybersecurity monitoring

Your Digital Footprint, watched every day.

ShieldWare is a daily cybersecurity monitoring service for small and medium companies without a security team. It finds the websites, mail servers and other public hostnames under your domain, checks their email, web and certificate security every day, and tells you in plain language what changed and what to fix first.

Request access → See how it works
Next assessment--:--:--
Hostnames14
Posture score73 / 100
● What Changed · live demoexample.com · this week
  • New asset discoveredlegacy-admin.example.comReview
  • DMARC enforcement improvedp=none → p=rejectResolved
  • Certificate expiringvpn.example.com · 21 daysAttention
  • Regressionwww.example.com · HSTS removedLow
How it works

One verified domain. Watched every day.

No software to install and nothing to configure on your computers. You prove the domain is yours once, and ShieldWare does the rest from the outside, every day.

  1. Step 1 of 4 · Verify your domain

    Prove the domain is yours

    Add one line to your domain settings. Whoever manages your website or email can do it for you.

    Nothing is checked before this step. ShieldWare re-checks the line every 6 hours.

  2. Step 2 of 4 · Discover your Digital Footprint

    See everything you have online

    Websites, mail servers and forgotten test sites under your domain, found from public sources.

    Sources: public certificate logs, DNS and links on your own website.

  3. Step 3 of 4 · Monitor Security Posture

    Checked every day, from the outside

    Every day ShieldWare checks your email protection, your websites and your certificates. It never logs in to anything and never tries to break in.

    13 email rules · 19 web rules · passive or low-impact checks

  4. Step 4 of 4 · See What Changed

    Know what to fix first

    When something changes, you get an email in plain language, with the fix. The most urgent change is always at the top.

    Every change is also kept in your What Changed history.

What ShieldWare checks

Six systems. One posture.

ShieldWare brings related security signals together, explains their business impact and makes the next step clear.

Discover

Digital Footprint

Find known, new and forgotten hostnames under your verified domain, and mark the ones you recognize.

CT logsDNSSite links
Protect

Email Security

Assess SPF, DKIM, DMARC, MTA-STS, TLS-RPT and STARTTLS on your mail servers, with the evidence behind each result.

SPFDKIMDMARCMTA-STSTLS-RPTSTARTTLS
Assess

Web & Infrastructure

Check HTTPS, TLS versions, security headers and insecure page content, and spot technologies such as WordPress or Cloudflare, without attempting exploitation.

HTTPSHSTSTLSHeadersExposed files
Watch

Certificate Monitoring

Detect expiring certificates, newly issued certificates and the names they cover.

ExpiryNew issuanceCovered names
Understand

What Changed

Surface new assets, regressions, resolved issues and score changes every day, with email alerts for the ones that matter.

New assetsRegressionsResolved
Act

Findings & Remediation

Understand why an issue matters, inspect supporting evidence and follow practical steps to fix it.

See example findings →
A finding you can act on

Every finding, in plain words.

Pick a finding from this demo workspace. Each one opens as a page from your private report: what it means, why it matters, the evidence and how to fix it.

ShieldWareExternal posture report
Demo workspace · example.com
CriticalConfirmed−35 score

Deployment configuration or a database backup is publicly downloadable

staging.example.com · W-EXPOSE-02 · first observed today

In plain wordsA file with passwords or data is open to anyone on the Internet.

Why it matters
Anyone who finds this file can read what it contains. Configuration files often hold database passwords and API keys, and a backup can hold customer data.
How to fix it
Remove the file from the public web root today, then change every password and key it contained. Block access to backup and configuration paths at the web server.
Evidence
GET https://staging.example.com/.env
→ 200 OK · text/plain · 1.4 KB
first observed today 09:04
How ShieldWare confirms the fix
The next daily assessment requests the same path. When the file is no longer served, the finding moves to Resolved. Changing the exposed passwords and keys is still up to you.
Why ShieldWare

Serious visibility. No enterprise complexity.

  • Rule 1

    Verified domains

    Authorization comes before any monitoring.

  • Rule 2

    Low-impact by default

    Passive and carefully bounded checks, never autonomous exploitation.

  • Rule 3

    Evidence-backed findings

    Important claims include supporting observations and confidence.

  • Rule 4

    Clear next steps

    Business context first, with technical detail available when needed.

ShieldWare is designed for owners, CTOs, IT managers, operations teams and service providers who are responsible for security without having a large security team.

It works for organizations anywhere, in English and Portuguese, with your data hosted in the European Union.

Coming next

On the roadmap.

ShieldWare is live with the capabilities above. These are next on the roadmap and are not part of current plans.

  • Planned

    Privacy & Compliance

    Observable privacy signals, structured readiness and evidence. Not legal advice or certification.

  • Planned

    Vulnerability Intelligence

    Credible technology evidence correlated with known vulnerabilities and active exploitation data.

  • Planned

    Brand Protection

    Evidence-led monitoring for suspicious lookalike and impersonation domains.

  • Planned

    Exposure Intelligence

    Authorized monitoring for company credential and breach exposure.

Questions

What it is. What it is not.

What does ShieldWare check?

Every day it checks the email security of your domain (SPF, DKIM, DMARC, MTA-STS, TLS-RPT and STARTTLS), your websites (HTTPS, TLS versions, security headers, cookies and exposed files such as .git or .env) and your certificates (expiry and newly issued certificates). It also finds the public hostnames under your domain and tells you when a new one appears.

Do we need a dedicated security team?

No. ShieldWare is designed to give owners, technical leads and lean IT teams clear priorities without requiring enterprise security expertise.

Do we need to install anything?

No. ShieldWare works from the outside, using what is publicly visible on the Internet. You add one DNS TXT record to prove the domain is yours, and nothing is checked before that.

Is ShieldWare a penetration-testing service?

No. ShieldWare focuses on daily external visibility using passive or low-impact checks. It does not autonomously exploit systems or replace an authorized penetration test.

How much does ShieldWare cost?

ShieldWare Base costs €99 per month for 1 domain and 10 monitored hostnames. ShieldWare Plus costs €249 per month for 3 domains and 30 monitored hostnames. Prices exclude VAT, every plan runs every check every day, and larger footprints get a custom price.

Does ShieldWare certify GDPR, NIS2 or ISO compliance?

No. Future Privacy & Compliance capabilities may identify observable signals and organize evidence, but automated checks are not legal advice or certification.

Why does company verification matter?

Verification helps protect third parties from unauthorized monitoring and allows ShieldWare to use deeper checks only where the customer has demonstrated authority.

Pricing

Same checks. Every plan.

Every plan runs every check, every day. Plans differ only in how much they cover.

Monthly, before VAT ShieldWare Base Start here€99per month ShieldWare Plus€249per month CustomLet's talkPricing for larger footprints
Domains 13More than 3
Monitored hostnames 1030More than 30
Members 310Tailored
Reports per month 14Tailored
On-demand checks per month 1030Tailored
Request access Request access Contact us

Daily monitoring, every check, email alerts and two-step verification on every plan.

No automatic extra charges. When you reach a limit, ShieldWare tells you and nothing is billed.

Monthly. Cancel any time and keep read-only access to your history for 30 days.

Request access

See your external posture.

ShieldWare is opening by invitation. Tell us about your company and what you need to monitor. We will reply from [email protected].