Quarterly Web Presence Checkup – 6 Internet-Facing Scans, Every 90 Days

Your external footprint changes every time someone adds a subdomain, renews a certificate, or spins up a bucket for one job.

The Quarterly Web Presence Checkup covers everything your business exposes to the internet and rechecks it every 90 days, so drift is caught in weeks rather than after an incident.

What's included

• Internet Exposure Scan ($69)
• Website & Storefront Checkup ($69)
• Certificate & Encryption Check ($19)
• Email Spoofing & BEC Check ($39)
• Cloud Storage Exposure Check ($49)
• Digital Footprint Report ($49)

$294 of scans per run. Annual plan: $349 for four runs — $87 a quarter.

How the annual plan works

The first run happens when you are ready. The launcher schedules itself every 90 days using the answers you already gave. Four reports over twelve months, each compared against the last.

Why quarterly matters for a web presence

Certificates expire on a schedule. New subdomains appear in public certificate logs the moment they are issued. Storage gets opened for one file and never closed. A quarterly rhythm catches all three while they are still cheap to fix — and gives you a documented history that a client's security questionnaire will ask for. A hosted scanner covering less than this starts at $468 a year, and a DMARC platform is another $432 on top.

What you get, every quarter

• One written PDF report emailed back to you, typically within one business day of each run.
• A per-surface score and a combined external risk picture.
• A resolved / still open / newly found comparison against your previous run.
• Attack-chain analysis across all six scans — exposed service plus weak certificate plus forgeable domain is one story, not six findings.
• A 90-day remediation plan ordered by what an attacker reaches for first.
• Reporting built to CompTIA Security+ and PenTest+ practice standards.

Choosing your option

Annual Plan — four scheduled runs over twelve months with trend reporting. Single Run — one run, one report, no scheduling.

Requirements

• Windows 10 or Windows 11
• Run as administrator
• An internet connection
• Your domain, public address and storage names — you must own them or be authorised to test them
• About 40 minutes for the first run; later runs are unattended

What this is not

QuickScan is detection and advisory only. Nothing here logs in, submits an attack payload, exploits a weakness or changes anything on your systems. It is not a penetration test, a certification, an audit or an attestation.

Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.