AUTHORISED EXTERNAL SECURITY REVIEW

Find the security gaps visible from the internet.

Get an engineer-reviewed view of exposed services, known vulnerabilities and common configuration risks on a public target you are authorised to test.

Request the free check Compare scopes
✓ Scope agreed before testing ✓ No card for the free check ✓ Typically 24–48 hours after scope confirmation
ILLUSTRATIVE REPORT EXAMPLE ONLY
72/ 100EXAMPLE SCORE
EXAMPLE PRIORITY3 actions identified

Exposed servicesExternal attack surface

REVIEW

Known vulnerabilitiesVisible software indicators

CHECK

Configuration postureCommon external controls

GOOD
Prioritised findingsClear next actionsEngineer reviewed

An external view of your security.

We review exposed services, visible software indicators and common configuration risks on an agreed public target, then prioritise the findings. The sweep covers what can be observed externally; it does not replace an internal audit or penetration test.

CHOOSE YOUR DEPTH

Start with a baseline. Go deeper when needed.

Both routes begin with ownership and scope confirmation. Expanded targets or specialist testing are agreed separately.

QUICK BASELINEUseful first view

Free Security Check

£0No card required

A lightweight external review of one agreed public target, designed to show whether deeper investigation is worthwhile.

  • External posture score
  • High-level visible findings
  • Prioritised next step
  • Email summary
Request free check →
DEEPER REVIEW
DEEP SECURITY SWEEPFor active remediation

Find it. Prioritise it. Plan the fix.

£300ex VAT · standard scope

A more detailed review of the agreed public target and visible services, followed by an actionable remediation discussion.

  • Detailed external findings
  • Common configuration review
  • Remediation report
  • Priority breakdown
  • 15-minute review call
Request deep sweep →

The £300 price applies to DC Core’s standard agreed scope. We will confirm any different or expanded scope—and its price—before work begins.

REQUEST YOUR SWEEP

Confirm the target and your authority.

Security testing must have a clear boundary. Share the public asset you want reviewed and confirm that you own it or have permission from the owner.

  • We confirm scope before testing
  • Do not send credentials or secrets
  • Results go to the work email provided
Only include an asset your organisation owns or has written permission to test.
Do not include passwords, keys or other secrets.

Need help with scope? Email security@dccore.io.

BEFORE YOU START

Security Sweep questions.

Need a different assessment? Email security@dccore.io.

Is this a penetration test?

No. The standard Security Sweep is a bounded external exposure review. A penetration test, exploit attempt or intrusive assessment needs a separate written scope and authorisation.

Will the review disrupt our systems?

The scope is designed to minimise disruption, and we agree the testing boundary before work begins. No security assessment can honestly promise zero operational risk.

What access do you need?

The standard sweep begins with an approved public hostname or domain and does not require customer credentials. If a deeper review needs additional access, we agree that separately.

Does a clean result prove the system is secure?

No. It reports what the agreed external review found at that point in time. It does not prove the absence of vulnerabilities or replace secure development, internal testing and ongoing monitoring.