Three public-DNS highlights
Free
One exact domain
- Reads public records only; no score is produced
- Domain, mail-routing, SPF, and DMARC presence
- Public DNS lookups only
Pricing
Start with a free domain check, choose a fixed-price one-domain report, or ask for a proposal for a full assessment or ongoing review. We invoice after the proposal is signed; there is no online checkout. Prices are in US dollars before tax.
Domain and FastTrack
One-domain options.
FastTrack prices apply to new enrollments. Upgrade to Business or Authenticated within 30 days and we credit what you paid for Domain, up to $750.
Monthly public-record review
$149 / month
One domain; $99 monthly for each additional authorized domain
- One automated monthly comparison and summary
- Reads public records only
- Starts after you run a check, prove you control the domain, sign the authorization and pay
Validated domain posture
$750
One time; one recheck within 30 days
- One domain, no login or privileged access
- Public-domain and email posture report
- Professional verification and prioritized next steps
One-domain guided review
$2,500
One time; after written authorization
- Everything in Domain
- We review the public website without logging in
- Results meeting and one retest
One domain and one service
$6,000
One time; two test accounts
- Authenticated workflow and access-control checks
- No privileged server access
- Results meeting and one retest
The healthcare technical add-on is $1,000: one intake session and a voluntary mapping to the HHS Healthcare Cybersecurity Performance Goals. A HIPAA Security Risk Analysis is a separate, broader exercise covering every place ePHI lives; this add-on maps controls only, and we ask for no patient data.
Baseline and focused work
Buy the outcome and target you need.
Each minimum covers one stated unit. Fragile systems, regulated data, out-of-hours work, travel or hardware can move the price. We agree any of that before starting.
| Service | Minimum | Included unit |
|---|---|---|
| KernelHawk Baseline | From $12,500 | One organization and environment, up to 25 listed systems or assets. Includes the five-area score, leadership, and technical reports, and a results meeting. Also includes 90-day portal access and verification of up to five agreed fixes. |
| Enterprise Analysis | From $15,000 | Multiple systems, deeper manual work, or privileged access under one written scope. |
| External exposure review | From $3,500 | Up to 10 listed domains or public IPs, evidence-backed findings, and one technical results meeting. |
| Source, web, or API review | From $8,500 | One repository up to 100,000 non-generated lines or one deployed application/API. Runtime and authenticated depth are scoped separately. |
| Cloud posture review | From $7,500 | One approved cloud account or tenant and up to 250 listed resources, using collector-supported or customer-supplied evidence. No changes are made. |
| Mobile application review | From $9,500 | One signed Android or iOS release on one platform. Runtime, backend, and a second platform are separate scope. |
| Binary or compiled-software review | From $5,000 | One artifact up to 500 MB, static analysis, evidence register, and technical results meeting. Dynamic execution is separate. |
| Device and firmware review | From $12,500 | One device model and one firmware release. Hardware, destructive, radio, protocol, and additional-release work is quoted separately. |
| KernelHawk Focused Review retest | $2,000 | Up to five previously reported findings in the unchanged target and method; $350 per additional finding. New discovery requires a new scope. |
KernelHawk Watch
KernelHawk Watch
Watch follows a completed Baseline and reviews your exposure and open fixes on a fixed schedule — once a month or once a quarter. Between those reviews, nobody is watching an alert queue; that requires a staffed operations team.
One review per quarter
$4,500 / quarter
Two-quarter initial term
- Up to 25 active assets
- Exposure, evidence, and remediation review
- Up to five agreed fix verifications
- Portal history and leadership summary
One review per month
$3,500 / month
Six-month initial term
- Up to 25 active assets
- Exposure, evidence, and remediation review
- Up to five agreed fix verifications
- Portal history and leadership summary
Adding systems
$75 / asset
Per review cycle; $350 per additional finding verified
- Added only by written scope
- Deeper assessment work is quoted separately
- You approve every asset we add, and every charge
Provider and white-label pilot
From $5,000 onboarding plus $3,000 monthly.
The pilot has a 12-month initial term and covers one provider with five active client workspaces. It includes limited branding, one custom-hostname setup, and portal operation. Data retention is agreed before use; operator support is during business hours. Each active workspace above five is $400 monthly. Assessments, Watch, custom integrations, premium support, and ThreatWing Decompiler usage are separate.
Provider pilots are quoted individually. A signed order, data terms, and a deployment review are completed before any client evidence is loaded.
ThreatWing Decompiler
Free private beta
ThreatWing is KernelHawk's software tool set. Its Decompiler is a binary-analysis workspace, with product details at threatwing.com. The hosted beta is free, with access by request. Planned pricing (subject to change before launch): Analyst $750/month, Provider $2,500/month, Enterprise from $7,500/month, each including a monthly allowance of analysis units. Final unit definitions and overage rates will be published when billing goes live.
Every proposal
Know exactly what is included.
KernelHawk does not increase the price because an assessment finds more problems. New systems or techniques require an agreed written scope change.
| Included term | What the proposal states |
|---|---|
| Authorization | Legal entity, systems, dates, methods; exclusions, request limits, stop conditions, and contacts. |
| Customer inputs | Access, test accounts, architecture context; inventory, interviews, and evidence the customer provides. |
| Deliverables | Reports, scorecard when applicable, action plan, results meeting; portal period, retention, and any white-label delivery. |
| Schedule and support | Start, assessment window, draft review; final delivery, retest window, and support channel. |
| Commercial terms | Fixed fee or minimum, included units, overages, payment milestones, and written-change conditions. |
Get a fixed proposal
Tell us what the business depends on.
A short scope call identifies the smallest useful engagement. The form starts a conversation and nothing else — testing needs a separate signature, and billing starts only after the proposal.
Request an assessment