Authorize the work before it runs
Use bounded assessment scopes and retained evidence for supported assessment packages. Provider credentials, owned targets and qualified runners determine which checks can execute.
BreachLens runs passive checks for certificate validity, security headers, DNS, email security, common ports, and related public signals — and grades each domain A–F with prioritized remediation. Part of the RogueLogics security platform.
Free requests require email verification and target approval before scanning begins
Unlike traditional assessments that take weeks, BreachLens scans on demand or on a schedule — delivering graded results in minutes.
Enter the domains you own. Agentless, external assessment — nothing to deploy, scan on demand or on a schedule.
Once a target is approved, nine check categories run in minutes — TLS/SSL, security headers, DNS, email security, open ports, cookies, mixed content and more.
Get an A–F security grade with prioritized findings, RogueLogics-branded PDF reports, and configured scan-completion callbacks.
Step-by-step remediation for every finding. Track remediation status and re-scan to verify fixes actually closed each gap.
Passive domain checks ship in every plan. Deployment-gated engines and service inquiries are labelled on their cards below.
Certificate validity and expiry checks for the HTTPS endpoint presented by the domain.
Checks a defined set of common TCP ports, the HTTP Server header, and WHOIS registration data. It is not a general service or CVE scanner.
DNS misconfigurations, missing security records, and domain hygiene issues that open the door to spoofing and takeover.
HTTP security headers, cookie flags, mixed content and server-version disclosure — graded against current best practice.
DMARC, SPF, DKIM, MTA-STS, TLS-RPT, BIMI and BEC exposure — graded A–F so you know exactly where spoofing risk lives.
Submit a consultation request for separately scoped security services. The software records the inquiry; staffing, qualifications, timing, testing, and deliverables require a signed statement of work.
Available only with deployment-gated active or internal scanning engines. Those engines are not part of the generally available passive domain scan.
Authenticated internal scanning through a deployment-gated host agent, on Growth and Enterprise plans. Patch actions are approval-gated: nothing runs until an authorized approver signs off. No supported generally available agent package or service commitment is included today.
A planned cross-app rollup. BreachLens does not currently publish findings into RogueOne's unified risk register.
The next wave of BreachLens — on-demand pentests, cross-app inbox/report workflows, push notifications, and cyber-insurance signals. Not yet generally available.
A single cross-platform pane that gathers BreachLens's most important activity — failing checks, dropping grades, completed scans — alongside every other Rogue Logics app in one prioritised stream, with a shared report center.
Opt in to push notifications so a scan completing or a grade slipping reaches you even when BreachLens is not open.
Submit a service inquiry. Scope, staffing, qualifications, timing, testing, and deliverables are not booked or guaranteed by the software and require separate written agreement.
Your external exposure posture feeds an insurance-readiness score, giving you and your underwriter a clear, evidence-backed view of cyber risk.
Raw check output isn't a posture. BreachLens turns every scan into a graded, prioritized picture of your external security — ready to share with executives and auditors.
A free passive-scan request requires email verification and target approval before scanning begins. It does not include active CVE scanning.
Use bounded assessment scopes and retained evidence for supported assessment packages. Provider credentials, owned targets and qualified runners determine which checks can execute.
Connect native findings to their source evidence, review changes over time and request retests against the intended scope. Tenant-scoped exports retain the difference between observations and unverified coverage.
Pass organization-scoped candidates to ForgeGuard for review. Discovery does not authorize testing; ownership, sandbox access and assessment configuration remain separate requirements.
Some assessment packages remain partial or pending qualification. Missing authorization, unsupported runners and inconclusive evidence do not become successful findings.
Explore guides and setupPublic-sector program preview
Inspect exact exposure identities and retained retest outcomes before using them in a public-service briefing.
Manage state security requirements, supplier and AI reviews, versioned reporting packages and public-records work in one connected program. Support state agencies, counties, cities and schools with explicit applicability decisions.
California SAM, SIMM and Cal-Secure, plus New York, Texas, Virginia and Washington reference packages.
Trace requirements and current evidence into SSP and other supported forms. Preview missing inputs, review the exact edition and preserve earlier exports.
Record vendor qualifications, AI providers and subprocessors. Follow changes into affected services and documents, then share reviewed snapshots with named public or private recipients.
Explore service dependencies, exposures and treatment work. Compare retained briefings and exact retest outcomes while keeping unrelated findings and review decisions separate.
Reference coverage and applicability are explicit. Generated documents need your review. Demonstrations do not establish live-provider qualification or agency approval.