Eleven scanners. One dashboard.
Every asset you own is checked by all 11 scanners on every plan — no scanner is hidden behind a higher tier. AI explains every finding in plain English so the smallest teams can act without a security specialist on staff.
Port & service scanning
Nmap-powered discovery of open ports, running services, and banner-level version detection across every IP you own.
CVE scanning (Nuclei)
9,000+ Nuclei templates run continuously against your assets — from critical RCEs to misconfigurations, with fresh templates pulled daily.
SSL & TLS monitoring
Certificate expiry, chain validation, cipher strength, and TLS protocol grading via testssl.sh — with escalating alerts at 30/14/7/1 days.
DNS security
SPF, DKIM, DMARC, DNSSEC, and MX health checks so attackers can't spoof your domain or slip phishing into your customers' inboxes.
HTTP security headers
CSP, HSTS, X-Frame-Options, CORS, and cookie flag analysis on every response — with concrete header values you can copy into your nginx or app.
Sensitive file detection
117 paths checked per asset: exposed .env, .git, backup SQL dumps, admin panels, phpinfo, debug endpoints — the things attackers look for first.
Subdomain takeover
Dangling DNS records pointing at unclaimed cloud services (Heroku, AWS, GitHub Pages, Fastly, 50+ fingerprints) — caught before someone else claims them.
Cloud bucket exposure
Public S3, GCS, and Azure Blob discovery from the outside. Find leaking buckets tied to your brand before a researcher or attacker does.
Brand & typosquat monitoring
Newly-registered lookalike domains that target your brand — catch phishing infrastructure before it goes live against your customers.
Screenshot & visual monitoring
Automated per-asset screenshots so you see how your assets look from the outside, and spot silent defacements or unexpected login pages.
Domain & WHOIS intelligence
Registrar, expiry, and nameserver tracking for every domain — so you're alerted before a forgotten renewal drops one of your subdomains.
Continuous scanning, explained by AI.
- Add a domain and we start scanning in under 5 minutes.
- Scheduled scans catch new issues the moment they appear.
- AI explains every finding — no security degree required.
Enterprise-grade scanning, without the enterprise overhead
FortWatch is dogfooded by its founder — every finding, every false positive, every confusing alert is a problem we feel first. The result is a scanner that respects your time and speaks your engineers’ language.
All scanners on every plan
AI-powered triage
Scheduled scans
All 11 scanners. AI on every plan.
Save 20% on annual billing. Every plan includes 5 infrastructure assets and 1 web app, AI analysis, and every scanner on this page — nothing hidden behind a higher tier.
Essential
For startups and small teams starting vulnerability management.
$99
/mo billed annually · 5 infra + 1 app
$124/mo monthly
- All 11 scanners on every asset
- AI-powered analysis on every finding
- Weekly scheduled scans
- 5 infra + 1 web app included
- Extra infra: $4/mo · extra app: $49/mo
- Up to 3 team members
- Email notifications
- Email support
Pro
For growing teams that need continuous protection and reporting.
$199
/mo billed annually · 5 infra + 1 app
$249/mo monthly
- Everything in Essential
- Daily scheduled scans + on-demand
- Emerging-threat CVE re-scans
- Port & service discovery (Nmap)
- PDF & CSV reports
- Slack, email, and webhook alerts
- Issue tracking with SLA deadlines
- Up to 10 team members
- Priority support
Business
For teams with compliance posture and deeper asset visibility.
$329
/mo billed annually · 5 infra + 1 app
$412/mo monthly
- Everything in Pro
- Cloud bucket exposure (S3, GCS, Azure)
- Subdomain takeover detection
- Brand & typosquat monitoring
- Sensitive file scanning (117 paths)
- Custom scan schedules per asset
- Extra infra: $6/mo · extra app: $59/mo
- Up to 25 team members
- Dedicated account manager
Need unlimited assets, SOC 2 evidence exports, or white-glove onboarding? Talk to us about Enterprise.
Ready to secure your infrastructure?
Start your free trial today and scan your entire attack surface in under 5 minutes.
No credit card required
14-Day free trial
Secure your entire stack today
Start scanning in under 5 minutes. No credit card required. 14-day free trial included.