01
See the exposure visible from the outside.
Start with the Internet-facing signals associated with a company domain. The focus stays on what is publicly observable, not intrusive access or internal network discovery.
External cybersecurity ratings
A clearer view of a riskier world.
SurfaceScore turns publicly observable cyber exposure into a clear 0–100 report card your team can understand, share, and improve.
No agents. No access to internal systems for the initial report.
SurfaceScore report
ExampleSample organization
northstar-demo.com
BreachScore
62/ 100
C
External posture needs attention
Better protected than 48% of comparable organizations based on this report's observed signals.
Internet exposureModerate
Known exploited vulns2 indicators
Credential exposureNot detected
Externally observable signals only
One shared language for risk
Less security noise. More confidence in the next move.
SurfaceScore makes the Internet-facing parts of your security posture legible for technical teams and decision-makers alike—without turning the report into another vulnerability spreadsheet.
Make it easy to explain.
A 0–100 score, letter grade, and benchmark bring disparate external signals into a report people can use.
Focus the conversation.
Use exposure indicators and practical guidance to decide what deserves attention next.
Coverage that scales with your view
Start with the score. Build a stronger signal over time.
Get an initial report free, then choose continuous coverage for one organization or an entire portfolio.
SurfaceScore
Report Card
A fast, understandable snapshot for any company domain.
$0per report
- 0–100 SurfaceScore and letter grade
- Exposure and credential indicators
- Industry percentile
- Shareable report card
Most popular
Continuous monitoring
Small Business
Continuous visibility for one organization and its team.
$79per month
- Continuous domain monitoring
- Exposure change alerts
- Remediation instructions
- Weekly posture reports
- Historical score tracking
SurfaceScore
Enterprise & MSP
Portfolio-level intelligence for complex organizations and providers.
Customannual agreement
- Multiple domains and subsidiaries
- Customer portfolio management
- Vulnerability intelligence and API
- Executive reports and benchmarking
- Volume-based pricing
Questions, answered
Understand the signal before you act.
A score is a risk signal, not proof of compromise.
See risk. Higher confidence.
Your external posture is already visible. Make it understandable.
Check a domain and get a clear report card for the observable signals that shape your Internet-facing exposure.