Skip to content

Product

External security, explained and documented

Värn looks at your organisation from the outside, the way an attacker or a new customer would – and tells you in plain language what needs doing.

Colleagues going through results on a screen

Monitoring

Passive checks of everything visible from the outside

Once verified, your domains and websites are assessed automatically on your schedule. Changes are compared with the previous scan so you can see what has happened.

  • TLS, certificates and encrypted connections
  • Security headers such as HSTS and Content-Security-Policy
  • SPF, DKIM, DMARC, MX, CAA and DNS changes
  • Strict scope: only verified domains, only permitted redirects
All checks and their limitations
A team gathered around a laptop

Findings and fixes

Prioritised, understandable and traceable

Every finding has a severity, a confidence level, technical evidence and numbered remediation steps. When the issue is gone, the finding closes automatically.

  • Tells missing safeguards apart from confirmed vulnerabilities
  • Assign an owner, comment and follow the history
  • Accept a risk with a reason – kept in the log
  • No duplicates: the same issue is always the same finding
How to work with findings
A person working at a computer late in the evening

Data breaches · coming soon

Find out when your accounts appear in known breaches

Monitoring is built but not switched on yet. Once it launches, Värn checks verified domains against Have I Been Pwned and shows which accounts are affected, what data was exposed and what you should do.

  • Only for domains you have proved you control
  • Passwords and leaked content are never stored
  • A clear status while the integration awaits approval
  • A concrete checklist for affected accounts
How monitoring will work
A modern meeting room with glass walls

Reports

Documentation that stands up to scrutiny

Create a security report with one click. It is based only on recorded observations, states its limitations and is stored unchanged with a checksum.

  • Management summary and risk register
  • Separates confirmed observations, assessed risks and checks not assessed
  • Mapping to NIS2, GDPR and ISO 27001
  • Print and PDF with one click
About the reports

Included in every plan

19 checks in six areas

Encrypted connection

  • HTTPS available
  • TLS protocol version
  • HTTP to HTTPS redirect

Certificate

  • Valid TLS certificate
  • Certificate expiry

Security headers

  • HSTS (Strict-Transport-Security)
  • Content Security Policy
  • X-Content-Type-Options
  • Framing protection (clickjacking)
  • Referrer-Policy
  • Version information in response headers

Cookies

  • Cookie security attributes

Email security

  • SPF (Sender Policy Framework)
  • SPF – DNS lookup count
  • DMARC
  • DKIM

DNS

  • MX records
  • CAA records
  • DNS snapshot

On the way

Planned for upcoming versions

We are open about what does not exist yet. None of this is included today.

Data breach monitoring

Built and ready. Launches once the agreement with the data source is in place.

Secure vault

Sharing of sensitive information – only after an independent review.

See your own security posture

Adding and verifying a domain takes a few minutes. The first assessment runs automatically.