Solution · MSP / MSSP

Give every client an A-F security grade

Clients are being asked about their security posture. Insurance underwriters are asking the same questions independently. ConnectSecure and Qualys scan internal vulnerabilities, but cyber insurers don't run agent-based internal scans. They run external domain checks. ComplianceLayer gives you that external view via API, with no agents and no installation required.

Use CaseClient security reporting
Primary ValueSell security conversations
SurfaceAPI + dashboard
AccessExternal only — no agents
50+
Client domains manageable
$99/mo
Starter plan
0
Agents installed
15+
Scan modules
Workflow

From domain list to client-ready grades

Three steps. Fully automatable. No client coordination required.

Step 01
Add client domains

Drop in a list of client domains via API or dashboard. No credentials, no agents, no client coordination. A domain name is all that's needed.

API keyDomain listSchedule
Step 02
Get A-F grades

Each domain gets a 0-100 score mapping to an A-F letter grade across DMARC, SPF, SSL, open ports, and HTTP headers. Alerts fire when a grade drops.

ScoreGradeFindings
Step 03
Report to clients

Pull results into your PSA, format a PDF with your branding, or share the dashboard. Monthly security posture report with zero manual effort after setup.

PDF reportDashboardWebhook
Frameworks

Grades mapped to what clients get asked

From cyber insurance applications to SOC 2 readiness — external domain scores feed the conversations your clients are already having.

Cyber Insurance
Insurance Underwriting
External domain checks that match what cyber insurers actually run at renewal. Score clients before the underwriter does.
SOC 2
Trust Services Criteria
Map external findings to Common Criteria controls. Useful for clients heading into SOC 2 readiness or annual reviews.
ISO 27001
Information Security
Align client posture data to Annex A controls for ISMS evidence packages and certification support engagements.
NIST CSF
Cybersecurity Framework
Evidence for Identify, Protect, and Detect functions. Suitable for federal clients and enterprise environments.
CIS Controls
CIS Critical Controls
Map domain-level findings to CIS Controls for clients adopting the Implementation Groups framework.
Custom
Your Reporting Framework
Build a scoring template that fits your service delivery model. White-label the output for client-facing reports.
Capabilities

Built for MSP scale

Bulk API scanning
One API key. Loop through every client domain on a schedule. Weekly scans across 50+ clients with zero manual effort after setup.
A-F grade for every client
Normalized 0-100 score mapped to a letter grade. Clear, client-friendly output you can drop into any report or dashboard.
DMARC, SPF, SSL, ports & headers
Five check categories per domain: email authentication, SSL/TLS config, open port exposure, HTTP security headers, DNS integrity.
No agent install required
A domain name is all that's needed. Score a prospective client before you have access to their environment.
Monthly billing, no contracts
Starter at $99/mo covers 100 domain scans — enough for 25 clients on weekly scanning. Cancel anytime. No demo call required.
White-label reporting
Pull scores into your PSA or reporting dashboard. Format into a PDF with your branding. Billable deliverable, zero manual work.
Client Report Card

One grade per client, every month

Each scan returns a structured report card: letter grade, per-check status, and remediation steps. Deliver it as-is or pull it into your own reporting format. The same data that feeds cyber insurance underwriting — without the $30K enterprise price tag.

Client Security Report
Weekly scan · Mar 28, 2026
MSP Report
Client Domainclientname.com
Overall GradeB (83 / 100)
DMARC StatusPASS
SSL StatusPASS — TLS 1.3
Open PortsNone exposed
Last ScannedMar 28, 2026

Start grading your client stack today

External domain scores via API. No agents. No installation. $99/mo Starter covers 25 clients on weekly scanning.

Free tier available — 10 scans/mo, no credit card required. View API docs →