Client login See the platform
Secured & powered by
Vercel Stripe

Continuous external security

Your last pentest is already outdated.

Your attack surface changes every day. Vigil continuously watches what the internet can see — detecting new vulnerabilities, exposure and configuration drift before they become incidents.

See the platform Talk to us
No agents
deployment
No code changes
integration
Continuous
cadence
Always watching

The gap

Security doesn’t wait for the next pentest.

A pentest might tell you that your environment was secure on Monday.

On Tuesday
  • a new endpoint ships
  • a firewall rule changes
  • a certificate approaches expiry
  • a debug route becomes public
  • a vulnerable dependency becomes exploitable

Your security posture changed. Your report didn’t.

Vigil closes the gap between audits.

  1. Pentest ✓ Secure
  2. Deploy new endpoint
  3. Config change exposure
  4. New CVE ! vulnerability
  5. Next pentest 90 days later

Vigil monitors the entire gap

Coverage

The gaps attackers rely on, continuously closed.

01

Attack surface

Continuously discover public hosts, ports, services and endpoints.

Know exactly what the internet can see.

02

Certificates

Track TLS certificates, chains, expiry, weak configurations and unexpected changes.

Before a certificate becomes an outage — or a weakness.

03

Vulnerabilities

Re-evaluate exposed systems as your infrastructure and the vulnerability landscape change.

A safe deploy today may become exploitable tomorrow.

04

Configuration drift

Baseline security-critical configuration and detect unexpected changes.

See exactly what changed — and when.

How it works

Continuous assurance. Without continuous overhead.

  1. 01

    Connect your surface

    Point Vigil at your domains. Vigil maps the externally reachable estate automatically.

    No agents No code changes
  2. 02

    Vigil watches every change

    Continuous sweeps establish and compare against the known baseline. When infrastructure changes, Vigil sees it.

    Baseline Diff
  3. 03

    Fix what matters

    Vigil prioritizes findings based on actual exposure and explains what changed, why it matters and how to fix it.

    Prioritized Explained

Platform

Your external security posture. One live view.

Vigil · Acme Inc
last sweep 4m ago All systems monitored
148
Assets monitored
6
Domains
0
Critical findings
99.98%
Coverage
HostPosturePortsTLS
api.acme.comHardened443397d
checkout.acme.comDrift detected443212d
www.acme.comHardened80 · 443301d
id.acme.comHardened44388d
status.acme.comBaselining443356d
Exposure trend · 90d −74%
Recent events
  • TLS certificate renewedapi.acme.com2h
  • New endpoint baselined/v2/webhooks1d
  • Security headers verified6 hosts2d
Certificates
6 valid · 0 expiring
Headers
Baseline held
Open services
2 expected
Config drift
1 reviewing

Interface preview · illustrative data

Signal, not noise

Findings without the archaeology.

Security teams don’t need another inbox full of alerts. Vigil gives every finding the context required to act: what changed, where, how exposed it is, and what to do next.

FINDING-4193 High
What changedContent-Security-Policy removed
Wherecheckout.company.com
ExposurePublic · Production
Why it mattersBrowser protections weakened
Recommended action Restore the previous CSP configuration.
- Content-Security-Policy: default-src 'self'; frame-ancestors 'none' + (header not present) Strict-Transport-Security: max-age=63072000

Built for continuous change

Deploy at software speed. Monitor at software speed.

Modern systems never hold still. Vigil evaluates external reality on every sweep instead of trusting a static inventory that ages the moment it is written.

Monitoring layer active

CI/CD
Cloud infrastructure
APIs
Microservices
DNS
Certificates
Third-party services
Endpoints

sweep · diff · re-evaluate · repeat

Security

Built for security teams. Designed like security infrastructure.

External monitoring

Vigil observes only what is publicly reachable.

No agents required

Nothing to install, nothing to maintain inside your estate.

Minimal operational overhead

Domains in, prioritized findings out.

Secure handling of customer data

Least privilege by default, minimal retention.

Clear auditability

Every finding carries its evidence and timestamp.

Transparent findings

No black-box scoring — the reasoning is shown.

Controlled access

Scoped roles and explicit access to results.

Pricing

One plan. Total protection.

Total Protection

Continuous external security for your whole public surface — fully managed.

€299 / month

Billed monthly · cancel anytime

  • Weekly automated scan of your entire public surface
  • Detailed weekly report delivered to your inbox
  • Your own live security dashboard
  • Deep vulnerability sweeps — not just surface checks
  • We go in and fix the holes we find
  • Honest, evidence-backed findings — no black-box scores
Get Total Protection

Starts with a free, no-obligation scan.

Your attack surface won’t wait. Neither should your security.

See what changed, what matters and what to fix — before anyone else does.

See the platform Talk to us

Continuously monitoring