New public entry points
Review approved domains, services, cloud entry points, and other internet-facing changes that could create a new path into the business.
KernelHawk Watch
Keep your security baseline from going stale.
Systems change, vendors change, staff change, and yesterday's fix can quietly reopen. Watch reviews exposure and open fixes on a schedule you choose.
What stays current
Review the changes that can move risk.
Watch starts from a completed Baseline. Each cycle compares what we find now against what we found last time.
Priority work in motion
Track which findings are open, overdue, mitigated; accepted, ready for retest, or blocked by a business decision.
Fixes that need proof
Retest agreed corrections and record whether the original condition is closed, reduced, unchanged, or replaced by another risk.
Threats that changed priority
Reconsider findings when exploitation evidence, vendor guidance, business use, or system importance changes.
Decisions without an owner
Surface work that lacks a responsible person, target date, accepted-risk decision, or clear path to closure.
A concise progress view
Show what improved, what remains urgent, where work is stalled, and which decisions require leadership attention.
Choose a cadence
Match the review to how quickly the business changes.
Both Watch plans include up to 25 active assets, verification of up to five agreed fixes per cycle, portal history, and one leadership summary. Additional active assets are $75 per cycle and additional fix verifications are $350 each.
$3,500 per month
For organizations with frequent releases, infrastructure changes, customer pressure, or a substantial remediation plan already in progress.
One scheduled review and report each month$4,500 per quarter
For organizations that need a dependable review of exposure, findings, ownership, and progress without a monthly operating cycle.
One scheduled review and report each quarterNot ready for a subscription? Many smaller or stable businesses simply repeat the baseline assessment once a year (from $12,500).
Change summary
New, removed, or materially changed systems and exposures within the active scope.
Remediation status
Progress, overdue actions, accepted risks, blocked items, and findings ready for verification.
Priority update
Issues whose urgency changed because of new evidence, business context, reachability, or control changes.
Retest evidence
Before-and-after results for the fixes included in that review cycle.
Leadership brief
A concise record of improvement, remaining exposure, decisions required, and recommended next actions.
Customer portal update
Authorized users can review the current score, coverage, findings, remediation status, and evidence freshness in the customer portal.
A clear boundary
What Watch does not include
Watch runs on the contracted schedule and nothing else. Between cycles, no one is reading your alerts, no agent is installed on your endpoints, and nobody is on call — those need a staffed operations team, which is a different service from a different kind of company.