Phase 01
Recon
Passive review of public information: the hosts, apps, and exposures that can be seen from outside, so the next phase is aimed at what matters, not noise.
Scoped security assessments
Rogue AI agents are already probing your sites and systems.
Seraphim Scan finds the gaps before they do. Scoped Security Assessments that show you what an attacker's AI agent sees, and how to close it.
Seraphim Scan helps teams that ship AI agents run scoped security work in three clear phases: passive recon, a Scoped Assessment with written client authorization, and remediation with retest, so you learn where the real risk is and how to close it.
- Passive recon only
- Written client authorization required
- Scoped Assessment
- Remediation and retest
- Private local models
Always scoped · Built by Ascend Maui
What it does
Three phases. One clear outcome.
A disciplined path from public surface map to scoped findings to a verified fix list.
Phase 02
Scoped Assessment
Scenario design with private local models, carried out within an agreed scope. Findings are documented and the work stops at the boundaries you set.
Phase 03
Remediation and Retest
Turn findings into ranked fixes, clear owners, and verification steps, then retest so engineering can confirm the gaps are closed.
Who it's for
Teams that need clear answers within a defined scope.
Security and AppSec teams
Need clear evidence of risk within an agreed scope, not another unchecked scanner dump.
Founders and product leads
Shipping fast and want a sober read on real risk before launch or fundraising diligence.
Compliance and risk owners
Require scoped assessments with audit-friendly notes and remediation trails.
Ways to work together
Start with a $99 Halo Scan. We quote the fixes.
After your Halo Scan, we'll send a custom quote to fix every issue we found. No obligation. Compare the tiers.
SeraphimPremium, custom scoped
The full engagement, from first look to verified fix and beyond.
CherubimRecurring subscription, mid to highA recurring watch on what the outside world can see, with periodic retests.
ThronesFixed-scope project, midOne deep assessment, then the hardening work to close what it finds.
AngelsEntry-levelA light first look at your public exposure. The easy on-ramp.
Instant, automated
Halo Scan, $99
A full passive perimeter sweep with dual-verified findings and a branded PDF report, usually in your inbox within minutes.
What's included in the Halo Scan
TLS certificate
- Certificate presented on port 443
- Issuer and subject
- Expiry date, flagged if under 21 days
HTTP security headers
- Strict-Transport-Security (HSTS)
- Content-Security-Policy
- Clickjacking protection (X-Frame-Options or CSP frame-ancestors)
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
- Software version disclosure (Server, X-Powered-By, X-AspNet-Version, X-Generator)
Cookies
- Secure and HttpOnly flags on cookies set by your homepage
DNS and email authentication
- A, AAAA, MX and NS records
- SPF presence and overly permissive +all
- DMARC presence and monitor-only p=none
- DKIM on 12 common selectors
- CAA records
Discovery and disclosure
- Subdomains in public certificate-transparency logs
- security.txt with a contact
- robots.txt disallowed paths
- sitemap.xml
Verification and report
- Every finding re-checked by a second, independent pass; anything that does not reproduce is dropped
- Branded PDF report with severity, evidence and a fix for each finding
- Emailed to you, usually within minutes of payment
All checks are passive: public DNS lookups, one TLS handshake and ordinary page requests to the one domain you authorize. No active testing, exploitation or login attempts.
Value breakdown
Estimated value if done separately by a consultant (~$150/hr)
| SSL/TLS certificate review | $150 |
| Security headers audit | $150 |
| Cookie settings review | $75 |
| DNS & email security (SPF/DKIM/DMARC) | $200 |
| Subdomain discovery | $200 |
| Second-pass verification of every finding | $250 |
| Branded PDF report with fixes | $300 |
| Total estimated value | $1,325 |
| Your price | $99 |
Estimates based on typical consultant time; not a quote from any third party.
In the age of AI, fight rogue agents with Seraphim Scan.
Ready to see what an attacker would see first?
Tell us what you need assessed. We'll reply with scope questions and next steps, with no cold scanner spam.