An assessment starts today
There is no deployment phase, no change control and no software approval. The constraint that makes agentless assessment narrower also makes it fast.
Agentless assessment
Assess Your External Attack Surface Without Installing Agents
Agentless assessment means no software is installed on any host, no appliance is deployed on the network, and no credentials are handed over. The assessment is performed entirely from the public internet, using information that is already published.
See.Tech requires one thing to begin: a domain name.
Why it matters
What being agentless actually changes.
No new attack surface
An agent is code running with privilege on your estate. See.Tech has no agent, no appliance, no VPN and no keys into your tenancy, so there is nothing to compromise in order to reach you through us.
Third parties become assessable
You cannot install an agent on a supplier. You can assess their external attack surface, which is why agentless assessment is what makes supply chain review practical.
It matches the attacker view
An attacker has no agent either. Assessing from outside produces the same picture they work from, including the assets your internal inventory never recorded.
Scope
What an agentless assessment can and cannot see.
Being explicit about the boundary is more useful than overstating the coverage. This is what the outside-in perspective includes, and what it does not.
| Visible to an agentless external assessment | Not visible without internal access |
|---|---|
| Internet-facing hosts, services and the software versions they disclose | Endpoint and server telemetry, processes and installed software inventories |
| Subdomains and orphaned DNS records discovered from public sources | Internal network segments, private IP ranges and internal-only systems |
| SPF, DKIM, DMARC and MX configuration | Mailbox contents, internal mail flow and user behaviour |
| SSL/TLS configuration, cipher strength and certificate expiry | Local configuration of hosts that are not internet-facing |
| Credentials exposed in breach corpora and dark web sources | Whether those credentials are still valid inside your identity provider |
| Lookalike and typosquatted domains registered against the brand | Whether a user has actually been phished by one |
| Vulnerabilities identified and scored on publicly reachable software | Whether a vulnerability is genuinely exploitable in your configuration |
An agentless external assessment does not replace endpoint telemetry, authenticated internal vulnerability scanning or penetration testing. Its purpose is to identify and prioritise the cyber exposure that can be observed from the public internet.
Questions
Agentless assessment, answered.
What does agentless cybersecurity assessment mean?
It means the assessment runs without installing software on any of your systems. No endpoint agent, no network appliance, no VPN tunnel and no credentials. Everything assessed is derived from information that is publicly reachable on the internet.
What information does See.Tech need to start?
A domain name you own or are authorised to assess. Nothing else is required to begin.
Why does See.Tech not require an endpoint agent?
Because the question it answers is what an attacker can see before they have any access. That view is built from public information by definition, so an agent would add nothing to it while adding deployment cost and privileged code on your estate.
What cannot be assessed without an agent?
Endpoint telemetry, internal network segments, host configuration on systems that are not internet-facing, mailbox contents, and whether an exposed credential is still valid. Authenticated internal scanning and endpoint tooling cover those, and See.Tech is not a substitute for them.
Is agentless assessment safe to run against production?
Yes. Assessments are non-invasive. Weaknesses are identified and scored but never exploited, so nothing is attacked and no production service is put at risk.
Why does agentless assessment help MSPs?
Because the barrier to assessing a client, or a prospect, drops to a single domain name. There is no deployment to schedule, no software approval to obtain and no access to negotiate, which makes assessment viable during a sales conversation or a quarterly review.
Start here
Assess your domain.
A See.Tech assessment starts from a domain name. Nothing is installed, no credentials change hands, and the first findings come back in hours.