Kryptasec Shield is a cloud platform for external attack surface management (EASM) and cyber risk scoring. It continuously analyzes a company's public-facing domains and returns a clear risk index with step-by-step guidance to fix each finding.
The platform checks 28 types of findings, including email authentication (SPF, DKIM and DMARC), certificates and TLS, DNS, subdomains and shadow IT, security headers, cookies, domain and IP reputation, WHOIS and exposed files. Domains are scanned automatically every week, with alerts by email, Slack, Microsoft Teams, Discord and Telegram.
Business and Enterprise plans add inbound anti-phishing for Microsoft 365 and Google Workspace, phishing simulations with employee training, configuration generators, automatic Jira tickets, a read-only API, and mapping of findings to ISO 27001, NIST CSF and PCI-DSS with an executive report for insurers.