FAQs

PortWarden requires proof of control or authorization before scanning assets. That keeps monitoring focused on systems customers own or are explicitly allowed to test.

After you add an asset and complete verification, PortWarden begins collecting external exposure signals such as open ports, reachable services, and changes that appear over time.

Change detection helps you spot new exposure, service drift, and configuration changes before they become surprises. It turns security review into an ongoing habit instead of a one-time snapshot.

Guided remediation means the platform explains what a finding means, why it matters, what to fix first, and how to validate that the fix actually reduced exposure.

Yes. Guided analysis is designed to help teams work through findings, ask practical follow-up questions, and move from scanner output to clear next steps.

Yes. Retesting helps confirm whether a change closed the exposure, reduced risk, or introduced a new signal that needs review.

Yes. The free plan gives teams a way to begin monitoring a small number of endpoints without a credit card, sales call, or long procurement process.

PortWarden pricing is endpoint-based, so cost scales with the public assets you choose to monitor instead of forcing a large enterprise bundle upfront.

Basic is for recurring visibility, reports, alerts, history, and guided analysis. Premium is for higher-risk or more critical endpoints that need deeper recurring visibility and stronger support.

On-demand testing is separate from recurring monitoring plans when the scope requires deeper validation, broader scanner coverage, or a one-off assessment.

Yes. Managed service providers and teams with larger endpoint counts should contact PortWarden so pricing, multi-client packaging, and any white-label options match the size of the deployment. Review the MSP page first if you need multi-tenant and branding details.

Yes. The free plan is intended as an easy starting point. You can move into paid monitoring when you need more endpoints, deeper analysis, or richer reporting.

PortWarden provides recurring external attack surface management, on-demand advanced scans, Premium human guidance, and quote-based penetration testing when you need a full engagement.

Use advanced testing when you need a deeper one-time look, post-change validation, targeted vulnerability analysis, or a broader review than regular monitoring provides.

Yes. MSPs get a multi-client provider portal with organization management, inventory, scheduled scans, findings, reports, client access controls, and optional white-label branding. See the MSP page for details, then contact us to onboard.

Yes, by quote. Request a full penetration test through the client portal support process. Engagements are reviewed so goals, timelines, authorization, and deliverables are clear.

Yes. Monitoring gives ongoing visibility. Premium guidance or quote-based work can add human review when findings, compliance questions, or business risk need a deeper look.

Advanced security testing is targeted on-demand validation for situations where a team needs more depth than recurring monitoring, such as launches, post-remediation checks, or suspicious exposure.

Advanced testing can focus on authorized network assets, web applications, domains, public IPs, and specific areas where the customer needs deeper technical validation.

PortWarden scopes testing to reduce unnecessary risk, but any security testing can create load or trigger defenses. Fragile systems should be identified before testing begins.

Yes. Post-change validation is a strong use case for advanced testing because it helps confirm whether remediation worked and whether any related exposure remains.

Advanced testing is targeted and on demand. A full penetration test is a broader scoped engagement with defined objectives, methodology, and deliverables.

Teams should request advanced testing when monitoring results, launch timing, compliance needs, or business risk justify a deeper technical look at a specific asset or area.

PortWarden monitoring tracks internet-facing exposure such as public IPs, domains, open ports, reachable services, application signals, and changes that appear between checks.

A one-time scan shows one moment. Recurring monitoring shows how exposure changes, which helps catch new ports, service drift, and configuration mistakes after infrastructure changes.

Alerts help teams respond when exposure changes instead of waiting for the next manual review. That shortens the time between risky drift and corrective action.

Yes. History helps teams understand whether a finding is new, recurring, resolved, or part of a larger exposure pattern.

Yes. Monitoring pairs findings with practical context so teams can prioritize fixes, retest after remediation, and document risk reduction over time.

Yes. PortWarden is built for authorized public domains and IP addresses so teams can see the external footprint that customers, vendors, and attackers can reach.

PortWarden uses scanners and workflows such as OpenVAS, OWASP ZAP, Nmap, Masscan, testssl.sh, web discovery, XSStrike, sqlmap, and targeted validation where appropriate.

No. Scanner output is processed into readable findings, summaries, context, and prioritization so teams can understand what matters without digging through noise first.

Different scanners are strong at different jobs. Combining network, TLS, web, discovery, and validation tools gives a more useful view than relying on one scanner alone.

PortWarden focuses on authorized and scoped validation. Potentially disruptive testing is handled carefully and should match the customer-approved scope.

PortWarden adds service-aware interpretation, evidence, and prioritization so generic scanner findings are easier to validate and less likely to distract from real risk.

Yes. Results are organized to help teams understand severity, exposure, evidence, likely business impact, and the remediation path that reduces the most risk first.

PortWarden was built so small businesses, owner-operators, MSPs, startups, and lean IT teams can get useful external attack surface visibility without buying an enterprise platform.

Teams that have public assets but limited security staff benefit most, especially when they need clear findings, change alerts, and guidance they can act on quickly.

PortWarden focuses on practical external attack surface management, readable reporting, and fix-first guidance instead of dumping raw technical output on busy operators.

No. PortWarden helps teams see and reduce exposure, but customers remain responsible for operating their systems and applying fixes. Human review is available when deeper help is needed.

PortWarden is scheduled external exposure monitoring for small businesses, startups, owner-operators, managed service providers, and lean IT teams. It helps you see what is exposed publicly, detect changes, and decide what to fix first.

External attack surface monitoring is the ongoing process of tracking the public-facing systems your business exposes to the internet, such as domains, public IPs, open ports, exposed services, certificates, and other externally reachable signals.

PortWarden is built for small businesses, startups, internal IT teams, MSPs, and owner-operators that need useful visibility without building and maintaining a full security toolchain.

Monthly monitoring plans are not the same thing as a full penetration test. PortWarden starts with recurring monitoring and reporting, then offers deeper validation and human review when needed.

A port scanner gives a point-in-time snapshot. Continuous exposure monitoring helps track changes over time, including new ports, service changes, certificate drift, and new findings after infrastructure changes.

PortWarden focuses on internet-facing exposure, including public IPs, domains, open ports, exposed services, certificates, common misconfigurations, and externally visible risk signals.

Yes. PortWarden is designed for regularly scheduled monitoring and change detection so teams can quickly see when exposure changes.

Yes. PortWarden offers a free option for a small number of endpoints so teams can start with basic port and exposure visibility before moving into broader scheduled monitoring.

Paid plans move beyond light visibility into broader detection, richer reporting, deeper vulnerability analysis, and guided remediation support.

Yes. You can sign up, add your domain or public IP, verify ownership, and start monitoring from the client portal.

No. You must own the target or be explicitly authorized to monitor it. PortWarden verifies ownership so the platform is not used for unauthorized scanning.

PortWarden is built around recurring checks and change detection. Exact frequency depends on your plan and setup, but the goal is consistent monitoring so you catch exposure drift quickly.

PortWarden uses service-aware analysis and guided interpretation to connect findings to what is actually running, which helps reduce generic scanner noise.

Built-in reporting and analysis explains why a finding matters, what changed, which remediation should come first, and how to validate the fix after changes are made.

PortWarden provides analysis and guidance, not hands-on administration. Your team or trusted provider applies the changes, then PortWarden helps retest and verify the result.

Yes. In addition to ongoing monitoring, PortWarden offers on-demand advanced testing for focused reconnaissance, one-time validation, or broader exposure review.

Security scanning can create load or trigger defensive controls, so PortWarden scans responsibly. Fragile or rate-limited systems should be identified before testing begins.

PortWarden is primarily focused on internet-facing exposure. If you need internal network work or different scope, contact us to choose the right option.

PortWarden minimizes collection and retains data only as long as needed to operate the service and provide useful history. Privacy and retention details are documented in the site policies.

Contact PortWarden if you need volume pricing, MSP onboarding or white-label packaging, a compliance discussion, advanced testing, penetration test scoping, or help deciding whether the platform fits. MSPs can review the MSP page first, then contact us.

Yes. If you are ready to begin monitoring, you can sign up through the client portal and start with the free plan without a sales call.

Include your organization type, how many domains or IPs you may monitor, whether you are an MSP (and if you need white-label branding or client portal access), and whether you need monitoring, advanced testing, or compliance support.

Yes. PortWarden can discuss security controls, data handling, responsible scanning requirements, and documentation needs when compliance or vendor review is part of the buying process.

A multi-client provider portal for authorized external attack surface management: organizations, inventory, scheduled scans, findings triage, reports, alerts, optional client portal access, white-label branding, and an API your own AI agents can use against the provider account and client organizations you manage.

Yes. Set brand name and logo, pick or customize a theme, use a custom portal hostname, manage TLS materials, and control whether the Powered by PortWarden footer appears. MSP pricing is custom and quoted from volume during onboarding.

Yes. Access settings are per organization. You can allow or deny client actions such as managing endpoints, managing organization users, viewing alerts, reports, findings activity, and advisory AI remediation guidance.

Yes. Provider administrators issue API keys so the agents you already run can work with your provider account and the client organizations under it. Agents stay inside the provider boundary and the per-organization permissions you set. They do not bypass client isolation, and they do not certify compliance or prevent a breach.

Use the contact page. Mention that you want MSP API access for your own agents, plus approximate client count, whether you need white-label branding or a custom hostname, and whether clients will log in themselves or stay fully managed by your team.

No. Provider admins only work with organizations that belong to their provider. Client data stays inside that provider account.

Use the contact page. Include approximate client count, whether you need white-label branding or a custom hostname, and whether clients will log in themselves or stay fully managed by your team.