Starter
For one product with a small public footprint.
$41/month
$490 billed yearly
- Up to 25 hosts
- 1 root domain
- Daily rescans
- Email alerts
- 30 days of finding history
- 2 seats
External attack surface monitoring
Find the exposed server before someone else does.
Tripline maps what your company has on the public internet, rechecks it on a schedule, and tells you in plain words what changed and how to close it.
The trial needs no card, and nothing gets installed on your servers.
acme-corp.exampleSample data
Last scan 14 min ago. 212 hosts watched, 5 open findings.
- HighAdmin login page is publicstaging.acme-corp.example/wp-adminNew
- HighPostgreSQL port 5432 opendb-02.acme-corp.example2 d
- MediumCertificate expires in 9 daysmail.acme-corp.example5 d
- MediumSPF record allows any senderacme-corp.example12 d
- LowNew subdomain discovereddev-billing.acme-corp.exampleNew
Next scan in 5 h 46 min
Coverage
Everything an attacker can see from outside, checked on a schedule.
Tripline looks at your company the way a stranger with a port scanner would, then files what it finds as work your team can close.
It starts from one domain
Give Tripline your root domain. It follows public records outward to find hosts your team forgot about, then asks you to confirm which ones are yours before it scans them.
Where it looks
- Certificate transparency logs
- Passive and active DNS
- Registered IP ranges
- Cloud provider hostnames
Asset map (sample)
- api.acme-corp.exampleConfirmed
- staging.acme-corp.exampleConfirmed
- dev-billing.acme-corp.exampleNeeds review
- status.acme-corp.exampleVendor, out of scope
Rescan interval
Every confirmed host is rescanned every six hours on Team, and every hour on Business.
Findings read like tickets
Each one names the host, what is exposed, why it matters and the change that closes it, with the raw evidence attached: the HTTP response, the certificate or the DNS record.
Quiet until something changes
You hear about new findings and ones that got worse. An issue you have accepted as a known risk stays silent unless its severity rises.
Nothing to install
Scans run from outside your network. There are no agents to deploy, no firewall rules to open and no credentials to hand over.
Alerts where you already work
Send findings to Slack, Microsoft Teams, email or any webhook, routed by severity and by domain. PagerDuty comes with Business.
Setup
From domain to first findings in about an hour.
Minute 0
Add your root domain
Type it in, prove you control it with a DNS TXT record, and choose where alerts go.
Minute 20
Review the asset map
Tripline lists every host it attributes to you. Mark anything that belongs to a vendor or a retired project, and it drops out of scope.
Hour 1
Read ranked findings
The first full scan finishes and findings arrive ranked by how reachable each one is and how much damage it could do.
Every 6 hours
Get the diff
Each rescan compares against the last. You hear about what is new, what got worse and what you fixed.
Placeholder testimonial
Replace this with a customer's own words about a finding Tripline caught.
Until that quote exists, the trial is the proof: point it at your own domain and judge the first findings, which arrive within the hour.
Pricing
Priced by the number of hosts we watch.
Every plan runs every check. Plans differ in how many hosts we watch, how often we rescan them and where alerts can go.
Annual billing: pay for 10 months, get 12.
Team
RecommendedFor companies running several products without a full-time security hire.
$124/month
$1,490 billed yearly
- Up to 250 hosts
- 5 root domains
- Rescans every 6 hours
- Slack, Teams, email and webhook alerts
- 90 days of finding history
- 10 seats
Business
For security teams that need scale, SSO and an API.
$333/month
$3,990 billed yearly
- Up to 2,000 hosts
- Unlimited root domains
- Hourly rescans
- Every alert channel, plus PagerDuty
- 1 year of finding history
- SAML SSO and REST API
- Unlimited seats
What happens at the host limit
Scanning keeps running for 14 days after you pass it. We email the account owner on day 1 and day 10, so there is time to upgrade or take hosts out of scope.
Cancelling
Cancel from Settings at any time. Monthly plans end with the current month, and annual plans are refunded for each unused full month.
Prices in USD, excluding sales tax and VAT.
Contact
Tell us what you need to protect.
Scope questions, a vendor security review, or a plan that does not fit: the engineers who build the scanner read these messages and reply within one working day.
- hello@tripline.example
- Vulnerability reports
- security@tripline.example