A security platform should be held to a higher standard than the systems it watches. This page sets out how EASMLens is run and what we commit to. Ask us for anything that is not here.
About the builder
Built by Security Solution Consultants, an ISO 27001 certified consultancy (certificate scope: consulting services and GRCLens). EASMLens itself is not within that certificate scope.
Availability
Hosted on Microsoft Azure in Australia. We do not publish an uptime percentage for EASMLens. If you need availability commitments, tell us and we will confirm in writing what we can offer.
Hosting
Hosted on Microsoft Azure in Australia. If your organisation has a data residency requirement, tell us the specific obligation and we will confirm in writing what we can commit to.
What EASMLens sends to your systems
Discovery uses public sources and light, standard web requests: DNS, certificate transparency logs and internet-wide scan datasets, plus ordinary DNS lookups and web requests to the names it finds, so it is not zero-contact. Active checks such as port scans run only on DNS-verified domains: service and version detection, web server configuration checks and lightweight API authentication checks. It never attempts to exploit a vulnerability, never logs in to your systems, and does not need credentials, agents or network access to your environment.
Only include assets you own or are authorised to test. Some markets regulate security testing services, so our country guides flag where local advice is worth taking.
Tenant separation and access
Each customer organisation has its own tenant with its own users, assets and findings. Access is role-based, and multi-factor authentication is available for user accounts. Accounts are provisioned by an administrator rather than through public self-service sign-up.
AI analysis
EASMLens uses an AI model to explain and prioritise what its data sources have found. The model is hosted by us rather than by a third-party AI provider, and it never decides what was found.
Integrations
Integrations with ticketing, SIEM and chat tools are on the roadmap. They are not available today.
Reporting a vulnerability
If you believe you have found a security vulnerability in EASMLens, please email info@easmlens.com with the details rather than testing further. We will acknowledge your report and keep you informed as we investigate.