Authorised assets
Ownership and verification state help restrict active assessments to assets associated with the customer workspace.
Security and privacy
Visibility should not
create new exposure.
Exposentra is designed around controlled access, verified assets, separated organisation workspaces and a deliberately external assessment model.
✓
DESIGN PRINCIPLEControl before assessment
Product safeguards
Security boundaries built into the workflow.
Security is not presented as a badge or an absolute promise. It is a set of boundaries, controls and operating practices that must continue to be maintained.
Tenant separation
Organisation data, assets, findings and support records are scoped to the relevant customer tenant.
Role-based access
Administrative, operational and read-only roles limit which users can perform higher-impact actions such as running assessments.
Minimal external view
Assessments use externally observable information and do not require credentials to internal networks, endpoints or cloud tenants.
Targeted notifications
Mobile notifications and support updates are associated with the correct user and organisation context.
Account control
Users can manage notification preferences and initiate account deletion through the product’s account controls.
Assessment boundary
Outside-in by design.
Exposentra examines public-facing signals. That limits the access needed to establish a useful baseline, while also defining what the platform cannot prove.
- Published email-security records
- Public DNS configuration
- Reachable web and TLS behaviour
- Publicly reachable TCP services
- Externally visible changes over time
- Internal network segmentation
- Endpoint control effectiveness
- Cloud or identity configuration
- Private application logic
- Whether every vulnerability is exploitable
Data transparency
What the service needs—and why.
This is a high-level product summary. The full privacy notice explains purposes, legal bases, retention, recipients and individual rights.
CategoryExamplesPrimary purpose
Account dataName, business email, authentication and account stateProvide and secure access
Organisation dataCompany/workspace information, roles and authorised usersOperate the tenant workspace
Asset dataDomains, public IP addresses, ownership and verification stateDefine the authorised assessment scope
Assessment dataExternally observable signals, scores, findings, observations and historyDeliver exposure monitoring and reporting
Support dataRequests, comments and service communicationsRespond to support and service enquiries
Operational dataSecurity logs, notification delivery state and technical diagnosticsProtect, troubleshoot and improve the service
Responsible use
Assess only what you are authorised to assess.
Customers must add and assess only assets they own, control or are explicitly authorised to test. Attempts to misuse the platform, bypass safeguards or assess third-party assets without permission may result in suspension.
Security researchers who believe they have found a vulnerability in Exposentra should report it privately and avoid accessing customer information or disrupting the service.
Report a security concern ↗Controlled early access
External visibility, with clear boundaries.
Request mobile early access or discuss managed web-platform onboarding for your organisation.