Too small for a security team. Too exposed to ignore it.
A plain-English security report card for your business's domain. Graded from the outside, the same view an attacker gets, and re-checked every night.
- Email spoofing protection
Anyone can send email that appears to come from this domain.
- Exposed services
An admin login page answers from the public internet.
- Website security certificate
Valid, and matches the domain. Renews in 61 days.
- Copycat domains
No lookalike domains found this month.
Graded from the outside.
Perimeter looks at a business the way a stranger on the internet can. Here is what it sees for harlow-reed.example.
Between doing nothing and hiring a security company
A managed security provider costs thousands a month and is built around someone answering the phone at two in the morning. If your business doesn't run systems that need watching around the clock, most of that bill is a response team you will never call.
So most small businesses do the other thing, which is nothing. Nobody notices when the certificate expires, when someone registers a domain one letter away from yours, or when it turns out anyone can send email in your name to your customers. These things change week to week, and they change quietly.
Perimeter is the part in between. It watches the outside of your business, tells you in plain English when something changes, and writes down what it found each month — so when an insurer or a larger customer asks how you handle security, you have an answer instead of a shrug.
See your own grade first
No account, no card, nothing to install. Type your domain and it runs now.
The free grade runs the first three checks and shows you the single worst finding. An account shows every check and what to do about each one.
How it works
- Add your domain. That's the whole setup. The first check runs immediately.
- We re-check every night. If something that was fine yesterday is broken today, you get an email that says what broke and what to do — not a dashboard you have to remember to visit.
- A report card arrives monthly. A PDF with every check, what was found, and the fix. The thing you forward when someone asks how you handle security.
What gets checked
One watchtower on your perimeter for each check.
- Email spoofing protection
Whether your domain tells the world which servers may send mail as you (SPF, DKIM and DMARC).
Without it, anyone can send an email that looks exactly like it came from you — to your customers, about their money.
- Website security certificate
Your website's HTTPS certificate: whether it is valid, matches your domain, and when it expires.
An expired certificate puts a browser warning in front of every customer who visits, on the day it lapses.
- Exposed services
Which services answer from your address on the public internet — databases, remote desktop, admin panels.
Anything reachable from the internet is reachable by people scanning it all day. Most of it was never meant to be.
- Copycat domains
Newly issued certificates for domains that look like yours — a letter swapped, a word added.
A lookalike domain is how a customer gets an invoice that seems to be from you, with someone else's bank details.
- Leaked employee passwordsComing soon
Whether staff addresses at your domain appear in known breach data.
A reused password from an old breach is the most common way a small business is broken into.
What Perimeter never does
- Ask for a password to any of your systems.
- Install an agent, or connect to your network, computers or email.
- Look at anything a stranger on the internet couldn't already see.
- Respond to an incident for you. It tells you what changed and what to do about it — the doing is yours, or your IT provider's.
Everything it reports is visible to anyone who cares to look. The point is that someone is finally looking on your behalf.
Pricing
Free
$0
- Your grade, and the worst finding in full
- Grade any domain from this page, no account needed
- Publish your grade as a badge once you confirm you own the domain
Subscription
$49.99 a month per business
- Every check in full, with what to do about each one
- Re-checked every night
- An email when a check that was passing starts failing
- A PDF report card at the start of each month
- Fix guides written out for your domain, with your DNS checked live
- Your score over time
Per business, however many staff it has. Cancel any time from your account page.
Questions
Do you need access to any of our systems?
No. Everything is looked up from the public internet: your domain's DNS records, your website's certificate, which services answer at your address, and public certificate logs. There's no password to hand over, nothing to install, and no connection to your network or email.
Is this an audit? Does it make us compliant?
No. Perimeter reports evidence about what anyone can see from outside your business. It doesn't look at your internal systems, and a good grade is not a certification or a guarantee. It's a record of what was checked and what was found.
What happens when something breaks?
With a subscription, your domain is re-checked every night. If a check that was passing starts failing, you get an email saying what changed and what to do about it. Perimeter doesn't fix things or respond to incidents for you. That part is yours, or your IT provider's.
Who can see our grade?
Only you. It becomes public only if you confirm you control the domain and switch on the badge, and even then the badge shows the letter alone, never the findings behind it.
Why do you ask us to prove we own the domain?
Anyone can type any domain into Perimeter. Anything that makes a public claim about a domain, like the badge, is kept for someone who has shown they control it: by clicking a link sent to an admin address, adding a DNS record, or adding a tag to the homepage.
What's in the monthly report?
A short PDF with the grade, how the score moved over the month, every finding worst first with the fix, and a note on what the report does and doesn't cover. It's written so you can forward it to an insurer or a customer who asks how you handle security.
What if I have more than one business?
Each business is billed separately, on the same subscription. Adding one charges the rest of the current month pro rata on your next invoice, and the form asks you to confirm before it does. Removing one lowers the price from your next invoice; the month already paid for is not refunded.
How do I cancel?
From your account page, under Manage billing. Deleting your account also cancels the subscription, and removes every business, check and report on it.
Create your free account
Free to create, free to see your grade. A subscription adds nightly re-checks, alerts and the monthly report card for $49.99 a month per business. One flat price, not per seat.
By creating an account you agree to the terms of service and privacy policy. Already have one? Log in.