Ears + Lop
Monitoring with a person on call
The same as Ears, but a person confirms every alert before it reaches you and tells you what to do. We retest everything every three months.
Everything in Ears with human triage: a Lop reviews every alert (no false positives in your inbox), recommends the remediation and runs a quarterly retest of what was verified.
- Duration
- Month to month
- Start
- We start as soon as you verify your domain
US$449/mo
Paid yearly: 2 months free. Ears + Lop: you pay US$4,490 for the year instead of US$5,388 (10 months instead of 12).
Start with Ears + LopYou can start today: verify your domain and monitoring begins.
It is for you if
- You do not want to watch a dashboard or decide which alerts matter.
- You would rather have a person confirm every alert and tell you what to do.
- You want us to retest every three months, not just monitor.
What we monitor
A person confirms every alert before it reaches you, so you get no false alarms.Human triage of every alert: a Lop reproduces it and rules out false positives.
We tell you what to do with each alert, in order of importance.Remediation advice per alert, prioritized by risk.
Every three months we retest what we had already verified.Quarterly retest of what was verified, to confirm it stays closed.
How we work
Day 0
Sign-up and verification
You verify the domain is yours and choose where you want the alerts.
Domain verification (DNS TXT record or domain email) and choice of the alert channel.
Around the clock
Monitoring
We check your surface continuously and compare it with the previous check to see what changed.
Continuous automated scan, 24/7 with diffs and a cross-check against CVEs, KEVs and leaked secrets.
When something comes up
A Lop confirms it
Before alerting you, a Lop checks that it is real and tells you what to do.
Human triage of the alert, false-positive filtering and a remediation recommendation.
Every 3 months
Retest
We retest what we had already verified to confirm it stays closed.
Quarterly retest of the verified findings, with the status updated in the dashboard.
What you get
- Alerts already confirmed, with no false alarms, and what to do about each one.
- Alerts with human triage and remediation advice, on the channel you choose.
- A dashboard with the status and history of your surface.
- Dashboard with current status and a history of changes and findings.
- A report every month and a trust page for your customers.
- Monthly report and a public trust page with status and history.
- Proof, every three months, that what was fixed stays fixed.
- Quarterly retest of the verified findings.
See a sample reportScope limits
Includes
- Everything in Ears: 1 domain, up to 50 assets, 24/7 monitoring.Ears base: 1 root domain, up to 50 assets, continuous scan and secrets.
- A person confirms every alert before it reaches you.Human triage of every alert, with no false positives in your inbox.
- A recommendation of what to do with each alert.Remediation advice per alert, prioritized by risk.
- A retest of what was verified every three months.Quarterly retest of the verified findings.
Does not include
- It does not fix things for you. For that, Lop Fix or Burrow.No remediation done by us: it advises, it does not perform the fix.
- It is not a deep audit. For that, Dig, Rabbit Hole or Warren.No full manual pentest: it watches the surface, not the app logic.
More than 50 assets or several domains? We fix a price before we start.
Questions before you buy
How is it different from Ears?
In Ears the alerts are automatic. In Ears + Lop a person confirms each one before it reaches you, tells you what to do and retests every three months.
Do you fix what you find?
We tell you what to do. If you want us to fix it, Lop Fix is added by the hour, or you have it included in Burrow.
How is it paid?
Monthly, and you cancel whenever you want. If you pay yearly, you get 2 months free.
Want your alerts already filtered by a person?
24/7 monitoring with a Lop who confirms every alert, tells you what to do and retests every three months.