Ears

24/7 monitoring

An audit looks at one moment. Then things change. We watch your surface around the clock and alert you as soon as something new shows up, by WhatsApp, Telegram or email.

Automated 24/7 monitoring of the external surface: diffs of subdomains, ports, services, TLS, DNS and email; new CVEs and KEVs on what is detected; secrets in public repositories. Dashboard, monthly report and a trust page.

Duration: Month to month
Start: We start as soon as you verify your domain

US$149/mo

Paid yearly: 2 months free. Ears: you pay US$1,490 for the year instead of US$1,788 (10 months instead of 12).

Start monitoring

You can start today: verify your domain and monitoring begins.

It is for you if

You already had an audit and want to find out when something changes.
Your company shows things on the internet that change often: servers, subdomains, services.
You want an alert in the moment, not to find out from a customer or the press.

What we monitor

Everything of yours open to the internet, around the clock, and what changed since the last check.Continuous diffs of subdomains, ports, services, TLS, DNS and email.

New flaws published in the software you use.New CVEs and KEVs on the technologies detected on your surface.

Your passwords or keys uploaded to the internet by mistake.Company secrets leaked in public repositories.

We alert you however you prefer: WhatsApp, Telegram, email or Slack.Alerts by WhatsApp, Telegram, email or Slack, on the channel you choose.

You see the status in your dashboard, get a monthly report and have a trust page.Dashboard with status and history, monthly report and a public trust page.

How we work

Day 0
Sign-up and verification
You verify the domain is yours and choose where you want the alerts.
Domain verification (DNS TXT record or domain email) and choice of the alert channel.
Around the clock
Monitoring
We check your surface continuously and compare it with the previous check to see what changed.
Continuous automated scan, 24/7 with diffs and a cross-check against CVEs, KEVs and leaked secrets.
As soon as something changes
Alert
We message you on the channel you chose, with what changed and why it matters.
Alert by WhatsApp, Telegram, email or Slack, with the detected change and its severity.
Every month
Report and trust
You get a report for the month and keep a trust page to show your customers.
Monthly report with what was detected and its status, and a public trust page with history.

What you get

An alert as soon as something new shows up, on the channel you choose.
Real-time alerts by WhatsApp, Telegram, email or Slack.
A dashboard with the status and history of your surface.
Dashboard with current status and a history of changes and findings.
A report every month with what happened.
Monthly report with changes, findings and their status.
A public trust page and, if you have no serious open risks, the “Monitored by LOP.run” badge.
Public trust page with status and history, and a verifiable badge.

See a sample report

Scope limits

Includes

1 domain and up to 50 servers or subdomains.1 root domain, up to 50 assets (hosts or subdomains).
24/7 check of everything you show on the internet.Continuous external surface scan, with diffs and correlation against CVEs and KEVs.
A search for your passwords or keys uploaded by mistake.Secrets leaked in public repositories.
Alerts by WhatsApp, Telegram, email or Slack.Alerts by WhatsApp, Telegram, email or Slack, on the channel you choose.

Does not include

It is not an audit: it does not go deep into your apps. For that, Dig, Rabbit Hole or Warren.No manual pentest: it watches the external surface, it does not test app logic.
It does not confirm each alert by hand. If you want that, see Ears + Lop.No human triage of alerts: Ears + Lop adds that.

More than 50 assets or several domains? We fix a price before we start.

Questions before you buy

Is there a free plan?

Yes. If you verify your domain, we check it once a month and write only if something changed. If you have no serious open risks, you can show the badge, but without the full trust page.

Will you flood me with alerts?

No. We alert you when something really changes and sort it by severity. If you want a person to filter and confirm each one, there is Ears + Lop.

How is it paid?

Monthly, and you cancel whenever you want. If you pay yearly, you get 2 months free.

Want to find out before anyone else?

24/7 monitoring of your surface, real-time alerts, a dashboard and a trust page. Verify your domain and it starts.