Features

What SimpleSecurity does

16 connected services for monitoring, governance and response. Choose the tier that matches your needs.

Start free View pricing

Individuals: see the Personal Free and Personal Plus tiers on the pricing page.

Monitoring

Continuous visibility into availability, certificates, email, vulnerabilities, and your attack surface

All plans

Uptime Monitor

1-minute interval checks across your endpoints with instant alerts the moment something goes down.

  • 1-minute check interval
  • Instant downtime alerts
  • Historical uptime metrics
All plans

SSL/TLS Monitor

Automated monitoring of SSL/TLS certificates with expiration alerts and configuration validation.

  • Expiration alerts
  • Configuration validation
  • Multi-domain coverage
Shield

Backups

An outbound-only heartbeat for your backup jobs: download a ready-made script for Bash, PowerShell, Python, Veeam, Task Scheduler, cron, Synology, Proxmox, or Acronis, and it pings us once when the job finishes — nothing ever calls in. Miss a check-in past schedule and grace, and you get an alert and an incident candidate, not a surprise during a restore. Restore tests are logged per job with outcome, duration, and whether they met your RTO, and both feed the CMDB and your compliance evidence.

  • Outbound-only heartbeat, nothing inbound
  • One-click scripts for 8 backup tools
  • Missed check-in → alert & incident candidate
  • Restore-test log with RTO outcome
  • Dashboard tile & CMDB chip per job
Shield

Email Security

Validate SPF, DKIM, and DMARC records to ensure proper email authentication for your domains.

  • SPF validation
  • DKIM verification
  • DMARC monitoring
Shield

Vulnerability Scanner

Scheduled and on-demand CVE matching with KEV/EPSS threat context, CMS/WordPress detection, and port scanning as part of every scan.

  • CVE matching with KEV/EPSS context
  • CMS/WordPress detection
  • Port scanning phase
  • Scheduled & on-demand scans
Shield

Attack-Surface Discovery

Automated subdomain discovery with weekly re-scans and diffing to catch shadow IT before attackers do.

  • Subdomain discovery
  • Weekly re-scan
  • Change diffing
Plus+

Security Feed

Stay informed with a curated feed of security news relevant to your environment.

  • Curated security news
  • Relevant threat context

Governance & Risk

Compliance mapping, risk management, vendor oversight, policy governance, and per-person awareness evidence

Fortress

Compliance

Map controls across 18 frameworks — including ISO 27001, SOC 2, NIST CSF, GDPR, CIS v8, NIS2/Cybersäkerhetslagen, and Nordic health/legal frameworks — with vulnerability-to-control auto-assessment suggestions and an auditor-ready export pack.

  • 18 frameworks (ISO 27001, SOC 2, NIST CSF, GDPR, CIS v8, NIS2 & more)
  • Vuln-to-control auto-assess suggestions
  • Auditor pack PDF export
Fortress

Risk Register

A CVSS/EPSS-informed risk register that converts identified vulnerabilities directly into tracked, owned risks.

  • CVSS/EPSS-informed scoring
  • Convert vulnerabilities to risks
  • Ownership & tracking
Fortress

Vendor Risk

Tiered vendor questionnaires with a public vendor portal and CSV import/export for third-party risk management at scale.

  • Tiered questionnaires
  • Public vendor portal
  • CSV import/export
Fortress

Policy Register

Manage the full lifecycle of security policies and documentation with built-in review SLAs.

  • Policy lifecycle tracking
  • Review SLAs
  • Central document register
Fortress

People & Awareness

Training that produces audit evidence, not certificates. Every lesson completion, quiz score and policy read-receipt is timestamped per person and exports as an auditor-ready CSV — and feeds control assessment across 10 of the 18 frameworks, including Cybersäkerhetslagen, NORMEN and HSLF-FS. Employees never log in: each gets a personal link in their work inbox, takes the lessons on a phone, and consumes no seat. Included in Fortress and Aegis, not a separate subscription.

  • 12 built-in lessons plus your own — bilingual EN/SV, Swedish written natively
  • No employee logins, no seats consumed
  • Policy acknowledgment tied to the approved version
  • Campaigns with reminders and an annual cadence
  • On/offboarding checklists

Response & Assets

Incident response, change control, the asset database that ties every module together, and the impact map of what depends on what

Fortress

Incident Register

NIS2 24h/72h and GDPR breach-notification clocks, incidents auto-created from downtime, candidate triage from vulnerability/SSL/vendor signals, per-tenant automation policy, and a built-in WHOIS/RDAP investigation tool.

  • NIS2 24h/72h & GDPR clocks
  • Auto-created from downtime
  • Candidate triage (vuln/SSL/vendor signals)
  • WHOIS/RDAP investigation tool
Fortress

Change Register

Log requests for change (RFCs) with a clear approval flow. Approvers cannot approve their own requests (segregation of duties), and outside suppliers or colleagues without a login can submit a change through a secure external link.

  • RFC / change-request register
  • Approval workflow with segregation of duties
  • External submitter links, no account needed
All plans

Asset Database (CMDB)

The single source of truth asset database, with per-asset posture badges and vendor linkage feeding every other module.

  • Single source of truth
  • Per-asset posture badges
  • Vendor linkage
All plans

Impact Map

A dependency map built from your asset database. See which services and assets are affected, and how far, when one asset goes down.

  • Dependency map across assets
  • Blast radius when an asset fails

Platform, included on every plan: Dashboard & posture score, Notifications, Knowledge Base, User Management.

How it fits together

One Connected Platform

Every service feeds the next — from asset discovery to your dashboard.

Drag to rotate

Compare

Service Comparison

Compare features across all tiers to find your perfect match

Service Shield Fortress Aegis
Monitored assets 50 assets 250 assets 1,000 assets
Users / multi-user access Unlimited users Unlimited users Unlimited users
Uptime Monitor
SSL/TLS Monitor
Email Security
Backups (job heartbeats & restore-test log)
Vulnerability Scanner
Attack-Surface Discovery
Security Feed
Asset Database (CMDB)
Compliance (18 frameworks) –
Risk Register –
Vendor Risk –
Impact Map
Change Register –
Incident Register –
Policy Register –
People & Awareness – 250 employees 1,000 employees
Public API access (REST) – –

One asset in. Everything else follows.

Select the plan that matches your business needs and start monitoring today.

Start freeView pricing