What is SecureIQ Lite?
SecureIQ Lite is the self-service version of SafeHill’s SecureIQ Threat Exposure Management platform. It gives any organization a free security assessment of its external attack surface in under an hour, plus 72 hour penetration testing booked directly from the dashboard.
Is the free security assessment really free?
Yes. The free security assessment on your signup domain is free, it stays free, and no credit card is required to run it. You can re-run it on demand.
What does the free external network vulnerability scan cover?
The free external network vulnerability scan discovers subdomains, DNS records, open ports and running services, web technologies, and TLS/SSL posture. Results come back as a letter grade from A+ to F, a 0 to 100 score, a severity breakdown, and a prioritized findings table.
Does SecureIQ Lite include a free web application vulnerability scan?
Yes. A free web application vulnerability scan runs automated dynamic testing (DAST) against your primary site as part of the same assessment. Web findings carry their OWASP Top 10 category and CWE, with full evidence and remediation guidance.
Can I really get a penetration test report in 72 hours?
Yes. The written report is delivered within 72 hours of the engagement starting. Findings also appear in your dashboard as testers validate them, so you’re not waiting in silence for the report to arrive.
What is included in a 72 hour external network penetration test?
A 72 hour external network penetration test is human testing against the internet-facing IPs you put in scope, followed by a written report delivered within 72 hours of the engagement starting, in the same format SafeHill hands to enterprise clients.
Is a 72 hour web application penetration test available?
Yes. A 72 hour web application penetration test covers up to five endpoints, each with its own credentials, so testers reach the authenticated areas of your application rather than only the public marketing pages.
Do I have to talk to a salesperson to get a penetration test?
No. Signup, scanning, module activation, and penetration test booking are all self-service. SafeHill’s team is available if you need additional support, but nothing in SecureIQ Lite requires a sales call.
How is SecureIQ Lite different from SecureIQ?
They both run on the same engines, testers, and report standard. SecureIQ is built for enterprise environments that need continuous coverage, custom integrations, and a guided rollout. SecureIQ Lite removes the sales cycle so smaller teams can start immediately and add coverage as they need it.
Can I give the penetration test report to my customer, auditor, or insurer?
Yes. Penetration test reports are delivered in the same format SafeHill hands to enterprise clients, so they’re ready to be reviewed by your customer, auditor, insurer, or board.
How does SafeHill verify I’m allowed to test a domain?
Domain ownership is verified server-side through a DNS record before any paid web target is tested. Scope validation also catches private IPs, public DNS resolvers, duplicates, and malformed entries before an engagement is booked.