Attack surface discovery
Identify reachable hosts, services and relevant subdomains within the explicitly authorised scope.
Penny by Point-IT
Know what attackers can see before they use it.
Penny maps your authorised external attack surface, tests relevant security controls and turns the evidence into a clear, prioritised report reviewed by Point-IT before delivery.
Norwegian companyEuropean infrastructureAuthorised scanning onlyHuman-reviewed PDF report
Example assessmentDeterministic
74/100
Assessment coverage100%
HTTP Security82%
Vulnerability Analysis76%
TLS Security64%
External security assessment
More than running a scanner.
Penny combines discovery, established security tooling, deterministic scoring and structured analysis. Findings are normalised, duplicates reduced and the final PDF is reviewed by Point-IT before it is sent to you.
Web, DNS, mail and TLS
Review externally visible controls, certificates, protocols, DNS and mail-security configuration.
Vulnerability analysis
Test exposed services for relevant known weaknesses and configuration issues.
Deterministic scoring
A reproducible score based on tested controls and evidence, not an AI-generated guess.
Prioritised remediation
Findings are classified by severity and translated into practical remediation priorities.
Human quality review
Before delivery, Point-IT reviews the generated PDF for obvious false positives, inconsistencies and nonsensical output.
How it works
Controlled from order to delivery.
01
Order & authorise
You define the domain and public IP addresses and confirm that you are authorised to have them assessed.
02
Scope validation
Point-IT contacts you within 3 business days to validate scope and arrange the assessment.
03
Assessment & review
Penny runs the authorised checks. Point-IT reviews the generated results before release.
04
PDF delivery
The reviewed report is sent manually as a PDF by email. A customer portal is not yet part of the service.
Transparent pricing
Professional external security assessments without enterprise-consultancy pricing.
All prices shown are exclusive of VAT and other applicable taxes. The base assessment covers one organisation and one primary domain. One optional public IP address is included at no extra charge.
Start here
One-time assessment
€395one-time
excl. VAT
- 1 primary domain
- 1 optional public IP address included
- Relevant subdomain discovery
- External service, web, DNS, mail and TLS checks
- Deterministic security score
- Point-IT quality review
- Reviewed PDF report
Best continuity
Penny Continuous Security
€895per year prepaid · or €245/quarter
excl. VAT
12-month minimum term · 4 quarterly assessments
- Quarterly external assessment
- 12-month subscription
- Comparison with previous findings
- New and recurring risks highlighted
- Reviewed PDF report each quarter
Verification Assessment
€195on demand · excl. VATA fresh assessment outside the normal cycle, useful after remediation or configuration changes.
Security consultancy
€150/hourexcl. VATRemediation, configuration changes, engineering and security consultancy are not included in assessment prices.
Additional public IP addresses (per assessment)
2nd public IP+ €50
3rd public IP+ €40
4th public IP+ €35
More than 4Custom quote
The assessment is a point-in-time, best-effort evaluation of the agreed external scope. It is not a certification and does not guarantee that vulnerabilities, compromise or future attacks cannot occur.
European infrastructure
Operated by a Norwegian company. Hosted in Germany.
Point-IT's website and Penny assessment infrastructure are hosted on servers located in Germany. Assessment data is handled within European infrastructure, subject to the applicable privacy and service terms.
European data location
Encrypted transport
Data minimisation
No anonymous third-party scanning
Responsible by design
Security testing requires explicit authorisation.
Penny only assesses an approved scope. Ordering the service does not trigger an automatic scan: Point-IT validates the scope first and contacts the customer before execution.
Terms of ServiceOrder Penny
Create an assessment order
Choose a service and submit the authorised scope below. Point-IT will contact you within 3 business days to validate the scope and arrange execution. No scan starts automatically.
3business days
Contact
Questions before ordering?
Use this form for product questions, partnerships, responsible disclosure or general enquiries.