Common Questions.
Uncommon Answers.

Preservers helps platform and partner-heavy teams see and reduce external cyber risk: Preserve Surface for your attack surface, Preserve Connect for vendor and partner exposure, Preserve Compliance to prove posture for SOC 2 and customer security reviews, and Preserve Fraud to intercept payment and instruction hijacking. MSSPs and security partners also use the platform as a client deliverable. Deploy without a heavy IT project.

Yes. MSSPs, consultancies, and advisory firms use Preserve Surface, Connect, and Compliance as repeatable client deliverables for external visibility, vendor monitoring, and trust evidence. If you are evaluating for a client portfolio rather than your own platform, contact us to discuss packaging and partnership.

Preserve Fraud catches authorized fraud that email gateways miss: look-alike domains registered to mimic your vendors, polished bank-change requests, and invoice thread hijacks that look routine. It detects impersonation early, validates wire and routing instructions against verified vendor history, and explains each hold before finance or AP approves payment. That matters for settlement workflows, vendor change requests, and any team moving money on email instructions.

Under twenty minutes. There is no IT project, no DNS changes, no network reconfiguration, and no endpoint agents. Built for lean security and engineering teams. You connect once and keep watching.

DORA (EU Digital Operational Resilience Act), NIS2 Directive (including transport and digital infrastructure), MiFID II (Article 16 client asset protection), SOC 2 Type 2, ISO 27001, and GDPR. Preserve Compliance continuously maps external attack surface and vendor risk controls into pre-formatted evidence packs compatible with Vanta, Drata, and standard questionnaire formats (SIG, CAIQ, custom RFPs).

Security questionnaires and customer trust reviews often stall deals because evidence is scattered and stale. Preserve Compliance helps teams track adherence and organize proof of security posture so you can answer buyers with current evidence instead of rebuilding answers under deadline pressure.

Yes. We offer a complimentary external security posture assessment. We review what is publicly visible about your platform from an attacker's perspective. This requires no internal access, no setup, and carries no obligation. You receive a confidential report and a walkthrough.

Starting at approximately €500 per month for Preserve Fraud. Preserve Surface (EASM) is priced per asset at €3 to €11. Preserve Connect and Preserve Compliance are scoped to your vendor and framework needs. Annual billing is standard. We discuss pricing once we understand your scope.

No. We use data minimisation by design, so no email content is stored on our servers. We are EU-hosted for European clients and US-hosted for North American clients. Zero Trust architecture, end-to-end encryption, and standard Data Processing Agreements are included.

External attack surface management (EASM) is continuous discovery and monitoring of every internet-facing asset tied to your organization: domains, subdomains, cloud storage, forgotten portals, staging environments, and look-alike domains. Unlike a one-time scan or a letter-grade rating, EASM watches the perimeter as it changes. Preservers Preserve Surface provides EASM so teams see exposure the way an attacker does, including attack paths to critical assets, not only what is already on an inventory.

Attack surface management (ASM) is the practice of finding, inventorying, and reducing the ways an organization can be reached from the internet. External ASM, often called EASM, focuses on what is public: shadow APIs, staging hosts, certificates, and brand look-alikes. Preserve Surface is Preservers ASM / EASM product: continuous discovery, Attack Paths visualization, posture scoring, and a remediation roadmap.

Third-party risk management (TPRM) is how organizations assess and oversee vendors, processors, carriers, and integration partners. Traditional TPRM leans on questionnaires that go stale. Continuous TPRM for cyber exposure watches each partner’s internet-facing footprint as it changes. Preserve Connect is Preservers TPRM capability: Vendor Risk Summary, remediation outreach, and shareable vendor reports so a partner leak does not become your customer data breach.

A security rating summarizes historical signals into a score for boards, insurers, or large vendor programs. Continuous attack surface monitoring finds new exposures as they appear: a misconfigured bucket, a fresh look-alike domain, an exposed API in staging. Preservers focuses on operational visibility and remediation through Preserve Surface and Preserve Connect so teams act before an exposure becomes an incident or a lost deal.

A Trust Center is a controlled place where customers and prospects can review live security posture, policies, and validated evidence without endless email threads. Audit-ready compliance means frameworks, controls, and evidence stay mapped so SOC 2, ISO 27001, and enterprise questionnaires can be answered from current proof. Preserve Compliance provides a customer Trust Center, document intelligence for assessments, scheduled checks, and audit-ready reports.

Vulnerability scanning tests known assets for known flaws on a schedule you define. Attack surface management first discovers assets you may not know exist, then prioritizes what is actually exposed to the public internet. Preservers combines discovery, Attack Paths, look-alike domain detection, certificate awareness, and business-context prioritization so teams fix what matters to product and operations.

Most growth-stage SaaS companies do not need a multi-year GRC rollout to improve visibility. Start with continuous external discovery (Preserve Surface / EASM), extend monitoring to critical vendors (Preserve Connect / TPRM), and keep Trust Center evidence audit-ready for SOC 2 and customer reviews (Preserve Compliance). Preservers deploys in under twenty minutes without DNS changes or a heavy IT project.

Preservers primary segments are Wealth Managers, IFAs and EAMs; Trust and Corporate Service Providers (TCSP); SaaS and B2B Software; and Logistics and Supply Chain Tech. Across those industries we deliver EASM (Preserve Surface), TPRM (Preserve Connect), audit-ready Trust Center proof (Preserve Compliance), and payment fraud interception (Preserve Fraud). We also support title and escrow, accounting, and security partners.

Attack Surface Management involves the continuous discovery and monitoring of every asset you have facing the internet. Unlike traditional point-in-time scanning, Preservers views your organization from the perspective of an active attacker. This allows us to identify shadow systems, exposed databases, and vulnerable APIs before they can be exploited by outside threats.

Traditional scanners are designed to find known bugs in the assets you have already identified. Preservers goes much further by first discovering the assets you might not know exist, such as forgotten subdomains or cloud instances. We then apply predictive intelligence to help you prioritize the risks that are actually dangerous to your operations.

Preserve Surface is external attack surface management for your platform. It continuously discovers domains, APIs, shadow properties, and internet-facing exposures so you can see your business the way attackers do and clarify security posture.

Preserve Connect maps and monitors the external attack surface of your vendors, carriers, and integration partners. Questionnaires go stale; Connect helps you see third-party exposure before it becomes your incident.

Preserve Surface provides continuous external visibility you can reference in SIG, CAIQ, and custom questionnaires. Preserve Compliance organizes SOC 2 and ISO 27001 evidence. Together they reduce the sales-engineering scramble when prospects run their own external scans.

Yes. Preserve Surface discovers assets outside your internal inventory: forgotten subdomains, open cloud storage, staging environments, and API endpoints reachable from the public internet. This is where many SaaS exposures start before they reach production data.

Preserve Connect maps and monitors the internet-facing footprint of carriers, warehouses, and logistics partners. When a partner exposes a new portal, certificate lapse, or misconfigured asset, you are notified so you can act before it becomes your platform incident.

Preserve Fraud detects impersonation infrastructure and high-risk payment or bank-change instructions before funds move. It correlates external threat signals with operational context so routine AP volume is not interrupted, but fraudulent carrier or vendor changes are intercepted.

Preservers intercepts fraudulent client instructions before funds are moved. It continuously monitors the external threat surface around your firm and your clients, detects impersonation attempts as they are being prepared, and places a verification layer on high-risk instruction emails. Every action is logged as regulator-ready evidence for GDPR, DNB, or CSSF frameworks.

Coached-consent fraud is a social engineering attack where the fraudster contacts the client before the accountant does, priming them with a plausible cover story so they confirm the instruction when the accountant calls to verify. Standard phone call-back procedures fail because the client genuinely confirms the fraudulent instruction. Preservers addresses this by intercepting the threat at the external perimeter before the attacker contacts the client.

Yes. Preservers produces evidence packs formatted for each applicable framework: GDPR Article 32 security controls, DNB/CSSF major incident reports pre-populated within the four-hour notification window, and evidence of adequate client asset safeguarding for professional indemnity insurance reviews.

Preservers provides continuous and documented evidence of security monitoring and client asset safeguarding, which are key requirements for modern SEC or FINRA audits. Our automated reporting gives you a readily available audit trail showing exactly how you identify and remediate threats to sensitive client data and instructions.

Email security filters known malicious content and phishing patterns. It cannot detect a politely-worded instruction arriving from a legitimate-looking domain registered three weeks ago in your client's voice. Preservers is purpose-built for high-stakes workflows, it understands the difference between a newsletter and a liquidation instruction, and intervenes only when the context warrants.

Preservers uses autonomous detection to identify surrogate invoice attacks and communication cloning in real time. We monitor the external communication threads and domain health surrounding a transaction window to neutralize hijacking attempts before instructions can be altered or funds diverted.

Yes. Through Preserve Connect, we map and monitor the external attack surface of your entire vendor ecosystem. If a custodian or software partner has a critical exposure, you are notified immediately so you can take proactive measures before your data or instructions are compromised.

Preservers intercepts fraudulent wire instructions before they reach your closing agents or clients. It continuously monitors for look-alike domains, detects impersonation attempts as they are being prepared, and places an autonomous verification layer on high-risk closing emails. Every action is logged as regulator-ready evidence for ALTA and GLBA compliance.

Yes. Attackers often spoof the portal notification email or convince parties to"bypass the portal for this urgent update." If the attacker can reach the homebuyer's or agent's inbox, they can bypass your portal. Preservers protects the inbox where the attack begins.