Continuous external and logged-in application testing with evidence-led verification. High and Critical candidates are cross-checked before they are presented as confirmed findings.
No login required. Passive external scan only; active and logged-in testing need verified ownership and signed-off scope.
Evidence and assurance controls built into every paid plan
Governance and assurance standards
Certified information security management
PerimAssure is certified to ISO/IEC 27001:2022. Its information security management system supports controlled operations, evidence handling and continual improvement across the service.
PerimAssure certified management system
Certified AI Management System
PerimAssure is certified to ISO/IEC 42001:2023. Its AI Management System applies evidence traceability, human review, bounded decisions and audit history to support responsible AI governance.
PerimAssure certified management system
Every finding is backed by captured evidence. Every AI verdict cites captured evidence or a reviewed line of code. Unverified High and Critical candidates are held for analyst review.
No CVEs, IPs, or versions introduced by the model. Every claim links to raw captured evidence you can verify yourself.
Wildcard DNS profiling, CDN detection, and adversarial cross-verification suppress common scanner noise and route uncertain High/Critical candidates to review.
Scheduled scans build measured history. See what improved, what regressed and what is new — with evidence for every change.
PerimAssure tracks externally observable posture and measured changes between specialist assessments. Assure Enterprise adds logged-in portal and API testing, and private code review, within a scope you sign off.
Track a higher-is-better Security Posture Score, the A–F grade and the exact findings introduced or resolved at each scheduled scan.
Observed version fingerprints are checked against current vulnerability intelligence. Unversioned technologies are not converted into generic CVE claims.
Classified endpoints, application findings, canonical technical records and control mappings stay within the authenticated portal and protected report stream.
20 specialised modules cover externally observable configuration, exposure and attack-surface signals. Assure Enterprise extends the same evidence trail behind your logins and into private code. Findings retain captured evidence and relevant CWE/OWASP mappings.
All 20 registered modules run according to authorisation, technology and opt-in. AI prompt testing is opt-in; out-of-band confirmation depends on service configuration and authorised scope.
DNS catch-all profiling before enumeration. If *.domain resolves identically, subdomain findings are suppressed.
CDN/serverless detection from header signatures. Origin-hunting skipped when behind Cloudflare, Fastly, or Vercel.
AI cannot introduce findings. Every verdict must cite captured evidence or a reviewed line of code, where code review is in scope.
If AI cross-verification is uncertain, findings are withheld — never promoted to confirmed.
Three steps from domain to actionable intelligence. No agents to install. Login and code access only on Assure Enterprise, within a scope you sign off.
Type your domain and hit scan. We begin passive reconnaissance immediately — no login, no configuration, no access required.
Specialised modules assess TLS, DNS, headers, subdomains, version-matched CVEs, breach signals, supply chain and API exposure. Findings retain captured evidence.
On Assure Enterprise, we test your logged-in portals and APIs, and private code, with measured changes between specialist assessments.
The people behind PerimAssure
Experience across commercial strategy, AI engineering, leadership and communication shapes the way we build security assurance that teams can use.
Meet the executive teamThomas Davies
Founder & CEO
Xen Lategan
Co-founder & CTO
Kim Wylie
Founding Operating Partner and Fractional Chief People Officer
Tom Buttle
Founding Operating Partner
You shouldn't have to choose between depth and frequency. Or between accuracy and affordability.
| Manual Pentest | Basic Scanners | PerimAssure | |
|---|---|---|---|
| Cost per asset | £5,000–£15,000 | Low-cost scanners | From £149/mo |
| Time to first report | 4–6 weeks | Minutes | Minutes |
| Testing frequency | Defined by engagement | Varies | Assure monthly · Assure+ Daily · Assure Enterprise scoped |
| Depth of testing | Deep, manual and scoped | Usually broad and automated | External, logged-in and source-code assessment |
| Testing behind logins | Often in scope | Limited | Assure Enterprise |
| Finding verification | Specialist judgement | Varies | Captured evidence + review gates |
| CVE intelligence | Point-in-time | Often generic | Version-matched on scheduled scans |
| Attack surface mapping | Manual recon | Varies | 20 specialised modules |
| Breach intelligence | Not included | Not included | Dark web monitoring |
| Evidence transparency | Varies by tester | Minimal | Full raw evidence |
Start with monthly active testing through Assure, or choose Assure+ Daily for daily monitoring, deeper reconnaissance and breach intelligence. Assure Enterprise adds testing behind your logins and private code review, scoped to your estate and managed for you.
Monthly active testing with version-matched CVE intelligence and evidence-backed reporting.
Offensive-grade reconnaissance. Evidence-led verification. Breach intelligence. Analyst review controls.
Pentest-depth testing behind your logins, run continuously and managed for you within a scope you sign off.
A specialist penetration test is a scoped point-in-time assessment and can include manual, authenticated and internal testing. PerimAssure complements it with scheduled external monitoring, evidence-led findings and change history between assessments. Assure scans monthly and Assure+ Daily scans daily. Assure Enterprise adds authenticated portal and API testing, and private code review, within a scope you sign off.
Every High and Critical candidate is checked against captured evidence and an adversarial refutation pass. Wildcard DNS and CDN-aware controls suppress common noise; uncertain candidates are held for analyst review rather than labelled as confirmed vulnerabilities.
Not for Assure or Assure+ Daily. They're entirely external — we test what an attacker would see from the outside, with no SSH, source code or internal network access. Assure Enterprise adds authenticated and source-code testing, but only within a scope you sign off, using test accounts and access you control.
Testing behind your logins: your customer portals, web apps and APIs, using dedicated test accounts agreed with you. For teams that build their own software, we add private source-code review. Agreed critical findings within the scoped agreement are fixed by our engineers, with a named SecOps contact.
When a versioned technology fingerprint is observed, PerimAssure compares it with current vulnerability intelligence during scheduled monitoring. Confirmed version matches are reported with the supporting evidence; unversioned signals are not converted into generic vulnerability claims.
Passive scans observe publicly available information only. Active scans use bounded non-destructive checks only within agreed scope and may appear in logs; we do not perform destructive testing. If you'd like to allowlist our scanner IP range, we provide it on request.
Yes, for readiness support. PerimAssure can identify internet-facing gaps and provide partial external evidence for firewalls, secure configuration and security update management. It cannot verify user access control or malware protection, certify your organisation, guarantee a pass or replace the official self-assessment, assessor, Certification Body or internal control review.
Monthly plans can be cancelled before the next renewal. Annual plans are prepaid 12-month commitments at a 10% discount; cancellation stops the next annual renewal but does not shorten or refund the current committed term except where required by law. Assure Enterprise terms are set in your scoped agreement. Your scan history and reports remain accessible until the paid term ends.
PerimAssure checks internet-facing controls against current threat and vulnerability intelligence. It reports matches only when the observed evidence supports them, while coverage limits remain visible rather than being presented as clean results.
Don't have the bandwidth to remediate critical findings? Our security engineers review your specific issues and provide hands-on fixes — not generic advice. Pricing is per-issue, scoped after we review the finding. No retainer. No lock-in. Faster than hiring a consultant, cheaper than a pentest firm.
We'll review your critical findings and send a fixed-price proposal within 24 hours.
Request remediation pricingOr email remediation@perimassure.com directly
See your external posture free in two minutes, no login required. Then go behind your logins and into private code with Assure Enterprise.
Request a scoping call