For enterprises
An organisation’s perimeter, monitored from the outside.
Domains, work addresses, brands, suppliers: VesperID ties every exposure to an asset you declared, qualifies it and hands it to your team and your leadership. Domains, work addresses, brands, suppliers, IP addresses: VesperID ties every exposure to an asset you declared, qualifies it and hands it to your team, your leadership and your auditors in a space they can read.
In one sentence
For a company, VesperID monitors from the outside a perimeter you declare and whose ownership you prove, domains, addresses, brands, suppliers, address ranges, and hands every qualified exposure to your team, your leadership and your auditors, with no agent and no access to your systems.
Who this is for
For organisations that have secured the inside and discover that most of the residual risk plays out elsewhere: at an employee’s home, at a contractor, at a registrar, in a resold database. A three-person security function gets as much from it as a thirty-person operations centre, because the work delivered is already qualified.
- The CISO, who needs a reliable outside view without hiring a monitoring team
- The IT department, which discovers exposed assets the inventory does not know about
- Legal counsel, who handles brand impersonation and takedown requests
- Risk and compliance, who must document continuous monitoring
- The chief executive, who wants a plain answer to “where do we stand?”
What we monitor
You declare a perimeter; we verify ownership, then we monitor it. Nothing is added without your knowledge, nothing is monitored without proof of legitimacy.
What you get: a perimeter declared line by line, verified through DNS, and nothing monitored without your knowledge.
- Your domain names and their subdomains, verified through a DNS record
- Your work addresses, individually or by whole domain
- Your brands, legal names and product names, as monitored keywords
- Your critical suppliers and subcontractors, for indirect exposure
- Your public IP ranges, if you activate external attack surface
- Your code repositories and exposed storage
- Your Microsoft 365 tenant, for your employees’ credentials and sessions
- Your bank identification numbers (BIN), if you issue cards
- Your executives and key people, once each has accepted the invitation
What you get
A dedicated client area, alerts inside your existing tools, and a contact who knows your file.
- A unified detection inbox, filterable, with saved views and bulk actions
- One screen per activated service, designed for decisions rather than exploration
- Alerts to email, Slack, Teams or webhook, with a minimum severity per channel
- Roles and scopes for your team, down to subsidiary level
- A monthly report ready for the board, and on-demand reports for your audits
- CSV and JSON exports, and an audit log of every sensitive action
- An application installable on desktop and mobile from the browser, with notifications and a code lock
- A quarterly review with an analyst, to set the next period’s priorities
What you get: your licence in the client area, with its quotas, its services and your team’s roles.
Composing the licence
No bundle, no tier: a licence is a named composition of services, each with its own price, and the whole catalogue is available on every licence. The four services below are the ones a company most often starts with; the others, the two cross analyses included, are added according to the actual exposure, at scoping or during the year.
The usual starting point
Added according to the exposure
- Ransomware & supply-chain exposure Know your data has been published before your customers do
- Open-web leaks & secrets The secret left behind in a public repository
- Dark-web mentions When your name circulates where it should not
- External attack surface What your organisation exposes without knowing
- Stolen sessions The cookie that walks past your second factor
- Banking data leaks The cards and accounts already for sale
- Exposure chains Where an exposure comes from, and what it enables
- Exposed staff Which accounts to reset, which devices to reinstall, which access to harden
- Executive protection An exposed person needs a perimeter of their own
- Managed takedown From detection to actual removal
- Investigations & historical search A precise question, a documented answer
How an engagement runs
Four steps, with no surprises and no integration work on the IT side.
-
Scoping
A conversation with an analyst: your business, what worries you, what you already monitor, who must be alerted. From it we produce a written proposal (perimeter, services, quotas, itemised price) that you can compare and discuss.
-
Perimeter and verification
When the licence is activated, the account owner is invited and then guided: declare the domains, publish the DNS verification record, add key addresses and people, invite the team, choose alerting channels. Monitoring starts asset by asset, from the first verification.
-
Continuous monitoring
The platform collects, correlates and grades continuously; alerts go out automatically according to your rules, with the expected action. You adjust alerting rules and thresholds over the first few weeks, until the noise level is right, that is, close to none; an analyst qualifies a case at your request.
-
Review and adjustment
A periodic review with your analyst: what was detected, what was handled, what remains open, what should be added to or removed from the perimeter. It is also when you decide on an extension, a service, more keywords, more credits, without waiting for renewal.
A bespoke offering, no public price
We do not publish a price list, because no two licences are alike. A licence is a named composition of services: every service carries its own price, its activation fee and its quota unit, and the price of the licence is the sum of its lines, itemised in the proposal. You know what you pay for and why.
How a licence is composed
- A licence carries a name, a one-year term and a composition of services chosen service by service
- Every service and every extension has its own price, activation fee and price per quota unit; never a bundle
- Any service of the catalogue can sit on any licence, and is added during the year on its own priced line
- An organisation, company or individual, can hold several licences: one per subsidiary, one per brand, one per protected executive
- 01
The monitored perimeter
The number of monitored identifiers (domains, subdomains, addresses, keywords, address ranges, people) drives collection volume. A multi-subsidiary group with forty domains does not compare with a single-brand company.
- 02
The services activated
Each service has its own price, with its own activation fee and quota unit: identifier, keyword, seat, search, takedown credit, executive profile, on-demand report. You pay only for what you activate, and an extension during the year is invoiced separately.
- 03
The level of support
Some organisations want only the platform and clean alerts. Others want a named analyst, regular reviews, investigations and takedowns handled for them. That level is chosen and can be revised at every renewal.
The licence is annual and paid by bank transfer, against an invoice issued by VesperID, whether the client is a company or an individual: that distinction only changes the invoicing and the contract. There is no online payment and no silent auto-renewal: renewal is discussed before the term ends, with the past year’s results in hand.
Bespoke offering: one price per service, no public price, no packages.
- French cybersecurity company
- Per-client isolation
- No password or cookie kept
- Reply within one working day
Frequently asked questions
Do we have to connect VesperID to our information system?
No. No agent, no probe, no access to your directories or your logs. The only technical action required is publishing a DNS verification record per domain. If you want alerts inside your tools, an outbound webhook is enough.
How do you handle a group with several subsidiaries?
Each subsidiary can hold its own assets in the perimeter, with clear attribution, and roles let you restrict visibility per scope; a subsidiary can also hold its own licence, with its composition and its invoice. The consolidated report stays available at group level, while a subsidiary sees only what concerns it.
Can we hold several licences?
Yes. An organisation holds as many licences as perimeters it wants to keep apart: one per subsidiary, one per brand, one per protected executive. Each carries its name, its composition of services, its quotas, its invoice and its term, and all of them read in the same client area.
What happens if we detect a major incident?
We contribute the external view: what leaked, since when, what is circulating, which access is involved, as a written investigation note if needed. We do not replace an incident response team, but we routinely work alongside the one you appoint.
Can a service be added mid-year?
Yes. An extension request is made from your client area; it produces a priced proposal for the remaining term and a separate invoice. The service is live as soon as it is activated, and produces results once the matching assets are verified.
What happens to our history at the end of the contract?
You can export all your detections and reports at any time, including during the wind-down period. After expiry, detections are kept for ninety days to allow export, then deleted; a different period, up to twelve months, can be set in writing, and earlier deletion requested the same way.
Request an exposure assessment
The licence is annual and paid by bank transfer, against an invoice issued by VesperID, whether the client is a company or an individual: that distinction only changes the invoicing and the contract. There is no online payment and no silent auto-renewal: renewal is discussed before the term ends, with the past year’s results in hand.
Bespoke offering: one price per service, no public price, no packages.