The Aegix Exposure Scan

See what an attacker sees.

The Aegix Exposure Scan is a complimentary, no-touch look at your domain, website and email, run the same way a real attacker does reconnaissance before picking a target. We only use public information, we never touch your systems, and you get a findings report with René's own take on what matters, explained in plain language.

What we check Five checks, all from the outside.
A scan in progress, drawn as it runs: five checks from the outside, then the findings report.

Already have an IT team? Good. This scan checks what is visible from outside, which is rarely on anyone's list. Hand them the report; most of the fixes take an afternoon.

Request your scan

Use your work email. We pick up the domain from it automatically, so we only ever scan a domain you actually belong to.

Your details
Please use your work email on your own domain, personal addresses (Gmail, Outlook, etc.) are not accepted.

After you submit, you get a confirmation email. René runs the scan personally and sends you the results within two business days.

We use your details to run your scan, send you the results and follow up once. You can stop any further email at any time. Privacy policy.

  • ISO 27001 UKAS-accredited, independently audited
  • 24/7 Human analysts on shift right now
  • Public data only We never touch your systems
  • Europe Europe-based, working under EU rules
René Bos, founder of Aegix

René Bos

Founder, Aegix

A personal note

This is the same scan I run for the businesses I work with, and I read every result personally. I have helped people stay ahead of cyber threats and dig out of them, including getting a hijacked domain back through the legal route. But prevention beats recovery every time. Most attacks today are not break-ins, they are logins: someone signs in with credentials that leaked long ago, and you never knew. On one scan we found over 40 of a business's logins already for sale on the dark web. They had no idea. Most owners don't know what they don't know, and that is exactly the gap attackers count on. This is your chance to see what they can already see, and close the door before it is used.

How it works

Three steps, zero hassle.

01

You submit your details

Your name, work email, company and team size. We pick up the domain to scan from there.

02

We run your Exposure Scan

We dig into your public exposure by hand and build a findings report, ranked by risk. Ready within 48 hours on business days.

03

You get your results

A clear findings report, with René explaining what matters and what to fix first. Yours to keep, no obligation.

What we check

Everything an attacker can see from the outside.

  • Email impersonation

    Can a stranger send email that looks like it came from you? If so, they can scam your customers, suppliers and team with fake invoices and requests in your name. We check whether that door is open.
  • Website weaknesses

    Whether your site is missing the basic protections that stop attackers from hijacking your pages, posing as your brand, or snooping on what your visitors type in.
  • Exposed systems

    Anything reachable from the open internet that should not be: forgotten servers, admin logins and systems left wide open as an easy way in.
  • Leaked passwords

    Whether your team's logins have already leaked in a data breach. These are the first thing attackers try, and most owners have no idea they are out there for sale.
  • Exposed keys

    Whether passwords or keys to your systems have been accidentally published in public code. It happens more than you would think, and it hands attackers the keys.
Outside the fence A scan walks around the outside of your systems and checks five doors an attacker can see from the internet. It never crosses the fence. Example result: email can be spoofed, the website misses guardrails, the other three are clean. Your systems Never touched 1 spoofable 2 no guardrails 3 clean 4 clean 5 clean

What you get back

A clear report, ranked by risk.

  • What's already solid first, your wins, not just your gaps.
  • Your top gaps, ranked by risk and urgency, so you know what to fix first.
  • A real attack scenario for each gap, in plain language, plus how to close it.
  • René's personal take on your findings, what matters, what does not, and what to fix first. No pitch, no obligation.

Typically ready within 48 hours on weekdays.

Findings summary · exposure scan
  • No breached credentials foundclean
  • Valid encryptionclean
  • No exposed systemsclean
  • Email can be spoofed as youhigh
  • Website missing guardrailsmedium
An example summary page: three checks clean, one high finding and one medium.

A real report

See exactly what you get back.

This is an example report. Yours is built from your own scan, your own vulnerabilities and recommendations, and walked through with René on a call.

Example report cover: what an attacker can already see from the outside, prepared for a fictional firm
The cover
Example findings summary: three checks clean, email spoofing high, website guardrails medium
The findings summary
Example finding page: email can be spoofed as you, what it means and what to do
One finding, in full

A fictional firm, so nothing here is a real client's. Your report follows the same layout with your own findings.

Request your Exposure Scan.

Teams under 10 get the report by email within two business days. Teams of 10 or more get a 30-minute call where René walks through the findings. Either way the report is yours to keep, no obligation.

Want more free tools? See everything we give away →

Or just call

+31 30 899 9200

Office hours, Europe. A real person picks up.