Prospect risk assessment

Prospect assessment is the one-step flow for sales conversations. It needs nothing from the prospect: no access, no agent and no domain verification.

Run one

1. On Home or Customers, choose Prospect assessment.
2. Enter the company name and website domain. Contact details are optional.
3. Tick the reports you want. By default:
   • Risk assessment: the client-facing report;
   • Consultant action plan: the internal, ticket-ready work list.
4. Start it.

RevoSecure creates the prospect, runs a passive external assessment and, when it finishes, generates the reports you ticked. The assessment page shows progress and download buttons for the finished reports.

What a passive assessment looks at

Only public information: DNS and DNSSEC, email authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT), TLS, website security headers, subdomains from certificate transparency, disclosed software versions matched to known CVEs, domain registration, and the dark web and exposure checks. Nothing is port-scanned and no credentials are tested. See External assessments and Dark web and exposure checks.

Reading the results with a prospect

• Lead with the score and grade, then the quick wins in the risk assessment report.
• Explain confidence: anything inferred from a version banner is marked suspected and is never rated critical, because a distribution may have back-ported the fix. See Confirmed, firm and suspected.
• "None found" in the dark web section means nothing turned up in the sources checked, not that no exposure exists.
• If some checks couldn't run (a timeout, say), every report carries a coverage notice so "not checked" is never mistaken for "no issues".

When they sign

Open the prospect's Customer settings → Profile → ⋯ → Convert to managed customer. Its findings and history carry over. Then verify its domains, install agents and connect Microsoft 365. See Add and manage customers.