Continuous external security monitoring · Made in the EU
Most attacks start outside your network. We keep watch there, every day.
Noroshi checks your website, DNS, e-mail protection and domain reputation from our own EU infrastructure. No agents, no scripts on your site, no cookies. You get a clear security score and plain-language fixes when something needs attention.
Free plan: one domain, weekly scans, no credit card.
Your server announces PHP 8.2.28, a version affected by CVE-2026-109618 (severity 9.2/10): attackers can run code on your server without logging in.
Fix: Update PHP to the latest 8.x release in your hosting panel, then re-scan to confirm the finding clears.
Port 22 (SSH) is reachable from the internet. Common for server management, but check whether access is limited to known IPs.
Fix: Review whether port 22 needs to be publicly reachable; if not, close it in the firewall.
01 · What we watch
What we keep an eye on, from the outside
Your website, your e-mail, your domain, the software on your site and the companies you depend on. All checked from our own European infrastructure.
Website & hosting
We look at your website the way an outsider does: settings that should be tighter, files that should not be public, and doors that should be closed.
Changes to your site
A new script appears, your checkout page changes, spam pages show up. You hear about it right away, before your customers do.
Known weak spots
When software on your site has a known security hole, we tell you which one and how to close it. In words you do not need a translator for.
E-mail you can trust
Does your e-mail prove it really comes from you? We check the settings behind that (SPF, DKIM, DMARC) and tell you exactly what to fix.
Who sends mail as you
Mailbox providers report daily who sent mail as your domain. Spoofing attempts, forgotten tools, real attackers: you see them in one clear list.
Copycats of your domain
Criminals register domains that look almost like yours, to trick your customers. We spot them before they are used.
Changes to your domain
The hidden settings that route your website and e-mail suddenly change? You hear it immediately. That is where most domain takeovers start.
The locks on your domain
DNSSEC, certificate authorities, registrar lock and expiry: the settings that decide whether someone can take your domain over. We check them all.
Uptime & reputation
Is your site online? And is your domain on spam or malware lists? We check both every few minutes.
The companies you depend on
Your hoster, payment provider and shipping partner are part of your security. If something goes wrong on their side, you hear it early.
Alerts that tell you what to do
Every alert comes with a concrete next step, written in plain words. In the dashboard, by e-mail, or in your own systems via webhook.
Monthly reports
A clear report of what we found and what you fixed. For management, clients or your NIS2 conversation.
02 · How it works
Three steps, five minutes
You decide what we scan. We only scan domains you have verified.
-
Add your domain
Create an account and add your domain. Basic checks start immediately.
-
Prove ownership
Add a DNS TXT record to prove the domain is yours and unlock deep scans.
-
Stay protected
We check your security daily and your uptime continuously. Alerts only when you need to act.
For technical teams
Want to know how Noroshi works under the hood?
Read our documentation: how our external checks work, the 8 core security checks, domain verification, and webhook integrations.
03 · Philosophy
Different thinking, different build
Noroshi is European by design: hosting, e-mail, data and development stay in the EU. And because we watch from the outside, we never install anything on your website.
- Infrastructure, vendors and data stay in the EU
- No tracker, script or cookie on your website. Ever.
- No agents to install or maintain
- Deep scans only on domains you have verified
- Every alert is rule-based and reproducible. No AI guesses.
- Your scan results are yours: PDF reports and deletion on request
04 · Pricing
Simple pricing
Start free. Switch when you want daily monitoring.
- 1 domain
- Single team member (you)
- Weekly security scan: HTTP headers, TLS certificate, SPF / DKIM / DMARC, DNSSEC / CAA / MTA-STS, domain expiry check, exposed files, ports, blocklists
- Guide for every finding: what, why, how to fix
- Alerts in the dashboard
- Response playbooks
+€4 / month for each additional domain. Cancel monthly.
Yearly billing: €66 per year for the first domain and €44 per year for each additional domain. One month free.
- Everything in Free
- Multiple domains
- Multiple team members with a shared workspace
- Daily security scans (incl. TLS certificate audit)
- Uptime checks every 5 minutes, with attack and overload detection
- Lookalike domain monitoring (brand protection)
- Script and checkout tamper detection (skimming alert)
- SEO spam watch + CVE matching for detected CMS and plugins
- E-mail alerts with concrete fixes (pick your categories)
- Alert webhooks: deliver alerts to your own ticketing system or chat
- Supplier watch: security problems at the parties you depend on (hoster, payment provider, logistics partner)
- Email sender monitoring: who sends mail as your domain (DMARC reports)
- Monthly threat briefing in your inbox
- Monthly PDF report + year overview
- NIS2 compliance overview (with PDF export)