What does Outerwall give a security team?
If you run security for your own organization, Outerwall shows you what could reach you from the internet, from inside Microsoft 365 and through your suppliers. It ranks every finding by the damage it could do and confirms what’s real. The same evidence runs your risk and compliance program and the Trust Center your customers see.
You get it through one of our MSSP or MSP partners. They run the service, and your team keeps the view and the decisions. If you already work with one, ask them, and if you contact us we’ll route you to them. If not, we’ll introduce you to one.
yourcompany.examplepublic sources only
| You listed | Found | |
|---|---|---|
| Host names | 12 | 38 |
| Suppliers | 2 | 6 |
| Lookalike domains | 0 | 2 |
| Staff emails in breaches | 0 | 11 |
| Threats in play | 0 | 3 |
Ready within an hour of your partner adding your domain. 0 active checks sent.
Bought through a partner, run with your team
Outerwall is sold only through MSSP and MSP partners, so you always have people behind it. This is who does what.
| Task or decision | Who does it |
|---|---|
| Approve the scope and every active check | Your team, before anything is touched |
| See every finding, with its evidence | Your team, in its own view of the client portal |
| Fix what’s found | Your team, or your partner’s technicians, from ranked tickets in ServiceNow, Jira or your partner’s PSA |
| Run the risk and compliance program | Your own security lead, or a vCISO from your partner |
| Accept a risk, change a policy or publish to the Trust Center | A named executive you choose, such as your CISO or chief risk officer |
| Order a penetration test | Your team, through your partner, using your partner’s testers or ours |
| Set up the service, support it and bill for it | Your partner |
| Keep the fabric and the six modules running | Outerwall |
We never sell to you around your partner, and we never use what we learn about your organization to sell to you.
Six modules, run on your own organization
Exposure management finds and fixes what could reach you. GRC proves you’re in control. Start with Discover and add the rest as you need them.
What your team sees
One ranked list of what could reach you, from outside, from inside and through your suppliers, and a risk and compliance program built from the same evidence.
Discover maps your organization from public sources before anything is scanned, including the hosts, domains and suppliers nobody listed. Remediate joins what it finds into attack paths, confirms them with safe checks on assets you approve and measures each one from inside, read-only.
So the list your team works from is short and in order: what an attacker could actually reach, and how far, with the evidence to show your board. A finding closes only when two checks confirm the fix.
yourcompany.example · ranked by blast radiustop 4 of 23
- 1Exploited flaw on the VPN gatewayConfirmed by a safe check. Could reach sign-in, file shares and payrollCatastrophic
- 2Payroll provider breach noticeIts app can read every staff profile in Microsoft 365Severe
- 3Lookalike domain aimed at financeRegistered last week, with mail records set upHigh
- 4Unlisted staging siteFound in certificate logs. Nobody listed itModerate
Each finding comes with its evidence, its attack path and a note of what couldn’t be seen.
Everything you expose, including what nobody listed
Hosts, domains, lookalike domains and staff credentials in breach data, found from public sources and watched for change.
Ranked by what an attacker could reach
Every finding ranked by blast radius, confirmed by a safe check and measured from inside Microsoft 365, Entra ID and Defender.
The suppliers behind you
Suppliers finds your providers from the traces they leave, ranks them by the damage a failure would do and watches them for breaches, outages and bankruptcies.
Penetration tests in the same place
Validate brings a trusted network of third-party, AI-assisted, human-led testers, working to one CREST-aligned methodology. Findings arrive as they’re confirmed.
A program that runs on evidence
Predictive GRC drafts your supplier register, risk register, controls and evidence packs, and proposes a risk when something happens at a supplier or in software you run.
Proof for customers and insurers
Trust Center, built on Predictive GRC, shows what you can prove on your own domain, and answers security questionnaires from the same approved claims.
How to get started
Public sources first. Nothing active runs until you’ve proved control, signed the scope and had 24 hours’ notice.
Talk to your partner
If an MSSP or MSP already looks after your security, ask them about Outerwall. If not, email partners@outerwall.ai and we’ll introduce you to one.
See your picture
Your partner adds your domain. Your picture is ready within the hour, from public sources, before anything is scanned.
Approve the checks
Prove you control the domain with a DNS record or a file, sign the scope and get our scan addresses 24 hours ahead.
Connect Microsoft 365
Read-only: settings and metadata, never mail, files or chats. Then turn on Predictive GRC and Trust Center.
How pricing works
- Through your partner
- You pay your partner, and your partner sets the price. Ask them for a quote, or ask us to introduce you to a partner who can give you one.
- Per organization, per month
- Banded by the size of your internet-facing footprint, never by the number of users or devices.
- Start with Discover
- Add modules as you need them. Each one reads the same fabric, so nothing is set up twice.
- Penetration tests per engagement
- Ordered through Validate, and fixes are retested free.
Your vendor review will include us
Your partner holds the contract, but Outerwall holds your findings and what it reads from Microsoft 365, so expect your third-party review to cover us too.
Send your questionnaire to partners@outerwall.ai and we’ll answer it directly, including the exact Microsoft 365 permissions we ask for.
Get Outerwall through a partner.
Ask the MSSP or MSP that looks after your security, or email partners@outerwall.ai and we’ll introduce you to one.