See what changes across the infrastructure you manage.
During a guided 14-day pilot, we help you select representative domains, map shared infrastructure, establish an external exposure baseline and review what changes.
Test SurfaceDiff on your real environment before deciding whether continued monitoring makes sense.
No credit card. No automatic subscription. Limited to selected hosting providers and MSPs.
| Domain | Severity | Type / title | Status | Action |
|---|---|---|---|---|
| shared: acme-hosting.com (+49 more) | high | Sensitive public port opened: 203.0.113.4:6379 redis · no auth · absent yesterday | new | ReviewedResolved |
Built for teams managing multiple customer domains
Hosting providers
Running shared or dedicated servers for your own customers.
MSPs
Managing customer infrastructure across many client environments.
Web and WordPress agencies
Maintaining multiple client sites and needing one place to see what changed.
The pilot is not intended for testing unrelated third-party domains. Every monitored domain must be verified through DNS.
What you receive during the pilot
- Guided selection of up to 20 representative domains
- Shared-infrastructure mapping
- Initial external exposure baseline
- 14 days of recurring monitoring
- Joint review of detected changes
- Final findings summary with recommended next steps
What SurfaceDiff monitors
- Subdomains
- Hosts
- Ports
- Services
- DNS
- TLS
- Email alerts
- Incidents
- Activity history
How the pilot works
Apply
Tell us approximately how many domains and servers you manage.
Verify your domains
Add a DNS TXT record to confirm ownership or authorization.
Monitor for 14 days
SurfaceDiff creates a baseline and monitors what changes.
Review the results
We review the detected changes with you and decide whether continued monitoring makes sense.
Your first useful result
The pilot starts with an external exposure baseline for the selected domains. You can immediately review the hosts, ports, services, subdomains, DNS records and TLS certificates that are publicly visible before waiting for the first change.
Shared infrastructure should not create duplicate noise
When multiple domains point to the same host, one infrastructure change should not create dozens of identical incidents. SurfaceDiff groups host-level changes and uses shared-infrastructure-aware token accounting.
1 shared server
51 tokens - not 100
See exactly how token pricing works on the pricing page, or read more about running SurfaceDiff for many client domains on the hosting solutions page. Managing infrastructure at MSP, MSSP or data centre scale? See the guided assessment for managed infrastructure providers.
What the pilot is not
- It is not a vulnerability or CVE scanner.
- It does not scan domains you cannot verify.
- It does not provide penetration testing.
- It does not include an uptime or response-time SLA.
- It does not automatically convert into a paid subscription.
Apply for the Pilot
We onboard up to five guided Hosting Pilots per month because domain selection, infrastructure mapping and incident review are handled manually.
What happens next
We review every application manually. If SurfaceDiff fits your environment, we contact you to select the initial domains and arrange the pilot setup.
Submitting the form does not create a subscription or require payment details.