EUSMEs · Service providers · Dev teams

Your test environments.Already exposed?

Dev, QA, staging: found before anyone else.

Aletheia finds the non-production environments visible from the Internet, and the real data left lying in them. Type your domain: in one minute, an A to F grade, without touching your servers.

No account · Preview sent by e-mail · Public sources only · EU sovereign solution

0requests to your servers for the preview
60 sfor your A to F grade
~290checks in the full report
100%EU · hosted and operated in Europe
✓ Passive by default
Preview · lab.exampleexample
E
estimated grade
10public subdomains
6non-production environments visible
3sensitive ports exposed
7·2known CVEs · actively exploited

E-mail and DNS · shown in full

SPFDMARC missingDKIM partialMTA-STSCAACertificate: 12 d

In the full report

  • Critical
  • Critical
  • High

Which hosts, which ports, which CVEs, and about 290 checks on your sites, with the fixes.

See the details →
EU Sovereign · Belgium
🏦 Built for SMEs and their service providers🔍 Passive first, never destructive⚖️ Findings mapped to NIS2, GDPR, ISO 27001🇪🇺 Made in Europe · owned in Europe

Not just another scanner. The counterpart of Pseudia.

Pseudia protects data before it leaves production. Aletheia checks that none is already exposed on your test environments.

Without Aletheia

  • A forgotten staging stays online for months
  • Real customer data copied into QA
  • A .env file anyone can read
  • You hear about it from a researcher, or from an attacker

With Aletheia

  • Every exposed environment, found and ranked
  • Visible personal data, flagged
  • A prioritised fix for every finding
  • With Pseudia, test data with no real identity

The preview shows the problem. The report tells you where.

The preview and the account are free. The Pro and Enterprise offers are coming soon: write to us to find out more.

Preview

Free no account
  • Estimated grade and counts
  • E-mail and DNS
  • Sent by e-mail
Get my preview →

Account

Free on your domain
  • Access to the tool, simple report
  • Findings located on your public sources
  • PDF summary
Create my account →

Pro

Coming soon
  • Light active analysis, with your consent
  • Exposed data, data paths, graph
  • NIS2, GDPR, ISO 27001, financial impact
  • Remediation tickets, recheck
Contact us →

Enterprise

Coming soon
  • Dedicated tool, installed on your premises
  • Analysis of your internal network
  • No data leaves your premises
  • Integration with Pseudia
Talk to an expert →

Your free account, in two clicks.

An address at your domain is enough: it creates the account and shows that you work for that domain. No technical setup, no DNS.

  1. Leave your work address at this domain.
  2. Click the link you receive: you are in the tool, with the simple report.
  3. Active analysis and full report: coming soon, contact us to find out more.

Gmail, Outlook and disposable addresses are refused: the address must belong to the analysed domain.

Frequently asked questions

Is the free preview legal on any domain?

It reads public sources only and sends no request to your servers. Large domains and sensitive public sites are excluded.

Why an address at my domain?

The full report tests your sites directly. We only do so with the consent of the organisation that owns the domain.

How does it relate to Pseudia?

Pseudia pseudonymises your data before it leaves production. Aletheia checks that none is already exposed.

How much do the Pro and Enterprise offers cost?

They are coming soon. To find out more, write to us.

A question? Let’s talk.

Active analysis, full report, on-premises installation: all of this is coming soon. Write to us, we will answer quickly.

Contact us →