External attack surface monitoring.
Assay scans your internet-facing systems for exposed services, vulnerable software and configuration changes. Findings are mapped to the Essential Eight and SMB1001.
Live. Sign-up is open.
Four verdicts.
Every check returns one of these four verdicts.
- OK
OK
The check ran and found no gap.
- AT RISK
At risk
The scan found exploitable software, a missing control or an exposed service.
- NOT ASSESSED
Not assessed
The check did not complete. It does not count as a pass.
- NOT OBSERVABLE
Not observable
The control cannot be checked from outside your network.
What every scan checks.
Every scan runs these six checks.
Attack-surface discovery
Lists every exposed host and service. Remote-access and database ports are flagged.
Vulnerability checks
Checks the services you expose for known CVEs, misconfigurations, default logins and TLS problems.
Email authentication
Checks SPF and DMARC in DNS for missing records, softfail, p=none and broken policies.
Exploited-in-the-wild ranking
Ranks findings against CISA’s Known Exploited Vulnerabilities catalogue and EPSS scores.
Attack paths
When a gap matters, shows the route an attacker could take to reach it, as MITRE ATT&CK techniques.
Change tracking
Each scheduled scan is compared with the previous one and anything that gets worse is reported.
Plans.
Monitor
$349a month
or $3,840 a year
One business. Daily scans, change alerts, attack paths and the insurance evidence pack.
Group
$549a month
or $6,040 a year
Three businesses under one account. Same features.
Portfolio
$999a month
or $10,990 a year
Ten businesses under one account, for IT providers and multi-entity groups.
Prices in AUD including GST. Billed monthly or yearly through Stripe.
Remediation is separate consulting work: breach remediation and defensive & advisory.
Managed monitoring.
A senior Black Shard engineer reads every Assay result and reports it to you with context.
Managed exposure monitoringBlack Shard builds and operates Assay. The firm also runs production platforms in law, health, property, capital and recruitment.