See what changes across the infrastructure you manage.
Join a 14-day guided SurfaceDiff pilot for hosting providers and MSPs. Monitor up to 20 verified domains, review real infrastructure changes, and see whether SurfaceDiff fits your operations.
No credit card. No automatic subscription. Limited to selected hosting providers and MSPs.
| Domain | Severity | Type / title | Status | Action |
|---|---|---|---|---|
| shared: acme-hosting.com (+49 more) | high | Sensitive public port opened: 203.0.113.4:6379 redis · no auth · absent yesterday | new | AcknowledgeIgnore |
Built for teams managing multiple customer domains
Hosting providers
Running shared or dedicated servers for your own customers.
MSPs
Managing customer infrastructure across many client environments.
Web and WordPress agencies
Maintaining multiple client sites and needing one place to see what changed.
The pilot is not intended for testing unrelated third-party domains. Every monitored domain must be verified through DNS.
During the 14-day pilot you can
- Monitor up to 20 verified domains
- Detect new subdomains, hosts, ports and services
- Track TLS certificate changes
- Receive change alerts by email
- Acknowledge, ignore or resolve incidents
- Mute expected exposures without hiding future unrelated changes
- Review a timestamped activity history
- See host-level deduplication across shared infrastructure
How the pilot works
Apply
Tell us approximately how many domains and servers you manage.
Verify your domains
Add a DNS TXT record to confirm ownership or authorization.
Monitor for 14 days
SurfaceDiff creates a baseline and monitors what changes.
Review the results
We review the detected changes with you and decide whether continued monitoring makes sense.
Shared infrastructure should not create duplicate noise
When multiple domains point to the same host, one infrastructure change should not create dozens of identical incidents. SurfaceDiff groups host-level changes and uses shared-infrastructure-aware token accounting.
1 shared server
51 tokens - not 100
See exactly how token pricing works on the pricing page, or read more about running SurfaceDiff for many client domains on the hosting solutions page.
What the pilot is not
- It is not a vulnerability or CVE scanner.
- It does not scan domains you cannot verify.
- It does not provide penetration testing.
- It does not include an uptime or response-time SLA.
- It does not automatically convert into a paid subscription.
Apply for the Pilot
We review every application manually - the pilot is limited to a small number of hosting providers, MSPs and agencies at a time.