Alpha by invitation · Public pricing
Know what you expose.
Atlas maps your external attack surface: domains, subdomains, ports and services visible from the Internet. No agent to install.
- example.comOwnership verified by TXTTracked
- portal.example.com443 open, HTTPSDiscovered
- app-test.example.com8080 open, HTTPNeeds review
The product
What Atlas looks at, what it leaves alone
Atlas only handles domains whose ownership has been verified. Intrusive templates, fuzzing and denial of service are excluded by default.
Domain discovery
Subdomains enumerated from public DNS records and certificate transparency logs.
Ports and services
A list of common ports is checked and responding services identified, on verified domains only.
Credential leak checks
Known leaks linked to the domain are checked, once a verification service is configured by the organisation.
Two-scan comparison
What appears, what disappears: the delta between two scanner passes shows what moves on your perimeter.
What Atlas does not do
No agent to install. No intrusive scanning. No fuzzing. No denial of service. And no promises beyond that: Paladin is available, Vanguard is in development.
Pricing
Public prices, no surprises
Two plans, billed per organisation and per month, excluding VAT. There is no plan without a fee.
Pro
129 € per month, excluding VAT
For an organisation tracking its own external attack surface.
- Atlas
- 10 domains tracked
- 100 scans per month
MSP
349 € per month, excluding VAT
For an IT service provider managing the security of several clients.
- Atlas, Vanguard and Paladin
- 100 domains tracked
- 1,000 scans per month
- Per-client separation
Vanguard is in development and will join the plan when it opens.
Access is by invitation during the alpha; online subscription is not open yet.
MSP
Built for those who manage several clients
Per-client separation
One organisation’s data is not visible from another.
Roles per member
A technician, an account manager and a director do not have the same rights.
A view per client
Each client organisation gets its own view of the external attack surface, with Atlas.
The multi-client console is in development and the partner programme is being designed. The MSP plan is announced; access is on request.
Scanner and data
A scanner that identifies itself publicly
Verified domains
A DNS TXT record proves domain ownership before any active check.
Public user-agent
RangeZero-Atlas/<version>
No intrusion
Intrusive templates, fuzzing and denial of service are excluded by default.
Simple opt-out
One email to abuse@range-zero.com is enough: no need to demonstrate a flaw.
Separated data
Each organisation’s data is separated at the database level.
French publisher
Cardinal Codes, 51 rue Paul Bert, 59280 Armentières (France).
Blog
The topics, explained
Three recent articles on external attack surface, regulation and data protection.
GDPR and cybersecurity: the two articles to know
For a data protection officer, Articles 32 and 33 of the GDPR are the starting point. Principles, measures and the notification deadline.
External attack surface management: where to start
What external attack surface management is, what it sees and what it does not, and the first steps for an SME.
NIS2: a roadmap for attack surface management
What the NIS2 Directive asks for in risk management, and how external attack surface fits into that work.
Alpha by invitation
Range Zero is in alpha, by invitation.
Pro (129 € per month, excluding VAT) and MSP (349 € per month, excluding VAT) pricing is public. Access is on request, by email.