Know What's
Exposed Before
It's Too Late
Continuous external port scanning and dark web intelligence to identify exposed assets and compromised data before hackers exploit them. Nothing is installed.
External scan
2 critical alerts
- Scanned From the Outside, Every Day
- Find the Open Port Before Someone Else Does
- Get the Alert With the Fix Attached
- You Close the Port, the Alert Resolves Itself
- Know When Your Logins Leak
Find Out What’s Already Exposed
- Every TCP port scanned daily
- Leaked logins checked daily
- Nothing installed on the server
Plans from $19 a month • Month to month
What You Get
Every plan covers both, in one dashboard. Domain monitoring is also sold on its own.
Endpoint Monitoring
Find the Open Port Before Someone Else Does
A database port left open after a migration, or SSH opened for a contractor and never closed, is found by whoever scans for it.
- Each endpoint (a server or IP address) is scanned once a day, with a lighter check every 5 to 30 minutes, by plan.
- Every open port is judged against your Allowed Ports list.
- Anything nobody approved becomes an alert with the fix attached, and closes itself once the port stays shut.
- The firewall map is included.
- Open port foundNot on your Allowed Ports list
- Alert sentWith the fix attached
- Alert closed itselfThe port stayed shut
Dark Web Domain Monitoring
Know When Your Logins Leak
Staff reuse passwords, and a customer's leaked login can sit in a list for months before anyone tells them.
- Each of your domains is checked every 24 hours.
- Checks run against a breach-intelligence service that indexes stealer logs, leaked password lists and dark-web forums.
- Alerts show which records are linked to staff, customers or third parties, plus the dark-web posts that name your domain.
- Add any domain you're responsible for. Nothing has to be added to the domain itself.
- Leaked loginm••••@acme-example.comStaff
- Leaked loginj••••@example-mail.comCustomer
- Dark-web mentionacme-example.com named in a dark-web forum post
See It In Action
A live instance of the platform with invented data, branded as a fictional hosting company called AegisHost. Click around.
No signup required · Fictional demo data · Resets nightly
What It Costs
Every plan includes every feature and a full sweep of all 65,535 ports once a day. Plans differ only in how many endpoints and domains they cover and how often the lighter check runs. An endpoint is one server or IP address.
Starter
$19 a month
Up to 10 endpoints
- Dark web monitoring for 1 domain
- Lighter check every 30 minutes, between sweeps
Professional
$49 a month
Up to 50 endpoints
- Dark web monitoring for 5 domains
- Lighter check every 10 minutes, between sweeps
Business
$179 a month
Up to 250 endpoints
- Dark web monitoring for 15 domains
- Lighter check every 5 minutes, between sweeps
Extra domains are $4 each per month, on any plan or on their own. Payment is by card, month to month. Above 250 endpoints, contact us for a quote.
Built as a White-Label Service From Day One
AegisWhite was built for hosting providers to resell under their own brand. Hosting companies, MSPs and MSSPs buy at wholesale, set their own retail price and keep the difference.
Native in WHMCS
The free module on the WHMCS Marketplace provisions on purchase, follows every suspension and cancellation, and adds a Security menu to your client area.
A Partner API
One API key covers provisioning, alerts with fix commands, Allowed Ports, single sign-on and firewall uploads, so you can run it from your own stack as well as from WHMCS.
Your Brand Throughout
Your logo, colors and portal domain, your name on alert emails, and your own mail server once you save its SMTP details.
One Wholesale Rate
$1.50 per endpoint and $1.50 per domain per month, so 20 endpoints is $30. No setup fee, no minimum and no contract, and nothing is owed before your first customer is active.
Frequently Asked Questions
Do I have to install anything?
No. Scanning runs on the platform's own infrastructure against your server's public address, and it is read-only: it sees what answers on a port and never logs in or changes anything. The one optional piece of software is the firewall collector, a small script that reads a server's firewall rules so the firewall map can be drawn, and those rules can be pasted in by hand instead.
How often are my servers and domains checked?
Servers get a full sweep of all 65,535 ports once a day and a lighter check every 5 to 30 minutes, by plan. Domains are checked every 24 hours. You can also start a server scan yourself, once per endpoint per hour.
What happens when something is found?
The alert names the port or the leaked record, grades it and explains in plain language what it means. In the portal, each port alert carries copy-and-paste fix commands for UFW, iptables, AWS, GCP or Azure, and it closes itself once the port stays shut. Changing a leaked password is up to you.
What does it cost?
Plans are by card and month to month: Starter at $19 a month for up to 10 endpoints and 1 domain, Professional at $49 for up to 50 endpoints and 5 domains, Business at $179 for up to 250 endpoints and 15 domains. Extra domains, or dark web domain monitoring on its own, are $4 per domain per month. The rest is on the pricing page.
Can I try it before I pay?
Two things are free. The live demo above is a running copy of the platform with invented data, and the exposure check runs a free search on a domain, email address or username, with no account.
Can I resell it to my own customers?
Yes. Hosting providers, MSPs and MSSPs pay $1.50 per endpoint and $1.50 per domain per month wholesale, run it under their own brand and sell it through WHMCS or the partner API. The terms are on the white-label page.
Start Monitoring Open Ports and Leaked Credentials
Plans from $19 a month with 1 domain included and extra domains at $4 each per month, by card and month to month.
Start MonitoringOr run a free exposure check first