|Pulse

See your security posture the way attackers and auditors do.

A free, instant check of the security controls observable from outside your organisation — mapped to Cyber Essentials, ISO 27001, SOC 2 and NIST CSF.

Passive checks only (DNS, TLS, HTTP headers) — we never log in. Exposed-port checks run only on domains you've verified you own.

Sample report

Here's what you get back

acme.com — example scan
68Grade C

Posture score

8 pass2 warn4 fail

Framework readiness

Cyber Essentials88% · 4/5 controls
ISO 2700168% · 8/14 controls
SOC 267% · 7/13 controls
NIST CSF / DORA69% · 6/10 controls

How you compare

68%

of 50–249 staff peers score at or below acme.com— you're ahead of the pack.

Cyber Essentialsyou 88% · peers 68%
ISO 27001you 68% · peers 55%
SOC 2you 67% · peers 57%
NIST CSF / DORAyou 69% · peers 60%

You're ahead here

  • Referrer-Policyonly 35% of peers pass
  • HSTS (force HTTPS)only 40% of peers pass

Industry baseline (estimated from public adoption data). Switches to live peer data once enough organisations are monitored.

Illustrative. Run a scan above for your own live report.

Your security posture, the way the outside world sees it

QO Pulse is a passive external check — it reads only what's publicly observable about your domain. No access to your systems, no credentials, no software to deploy.

1

Enter your domain

No login, no agents, nothing to install. Just a domain.

2

We look from the outside in

Passive checks of your TLS, email authentication (SPF/DMARC/DKIM), DNS and HTTP security headers — the same signals attackers and auditors see. We never log in. Once you verify you own a domain, we also check it for internet-exposed high-risk ports.

3

Get your posture, scored

A clear score mapped to Cyber Essentials, ISO 27001, SOC 2 and NIST CSF, with prioritised fixes and how you compare to peers.

What you get

External posture score

One weighted score for your internet-facing security, graded A–F.

Framework readiness

Mapped to Cyber Essentials, ISO 27001, SOC 2 and NIST CSF / DORA.

Lookalike & spoofing checks

Surfaces registered typosquat domains and weak email authentication.

Peer benchmarking

See how you stack up against organisations of your size.

Continuous monitoring

Verify your domain to get weekly re-scans and drift alerts by email.

AI executive summary

A plain-English briefing of what matters and what to fix first.

Part of the Quod Orbis family

The complete picture, when you're ready for it

Quod Orbis runs a complete enterprise Continuous Controls Monitoring platform — continuous, automated assurance across all your controls, internal and external, mapped to every major framework with expert support. QO Pulse is the free, instant slice of that discipline: the external signals every organisation should be watching. Smaller teams get an enhanced security baseline today; larger ones get a fast first read before going deeper.

Explore the full CCM platform →