Startup Program
Exposure Management at Startup Pricing.
Most startups meet external attack surface management at the wrong moment: after an incident, during an audit, or when a customer’s procurement team won’t sign without evidence. The Startup Program gives qualifying early-stage companies the Deepinfo Platform earlier, on terms sized to their stage.
A procurement questionnaire
How do you track your external exposure?
Quarterly review
The platform answers, acme
| Inventory | domains, subdomains and IPs from your primary domain | |
|---|---|---|
| Findings | each with a date | |
| Frameworks | OWASP Top 10 2021 · PCI DSS 4.0 · HIPAA · CWE | |
| Report | a PDF report |
Built for Companies Building Real Things.
Venture-backed or bootstrapped, the program is for companies that already run a product customers log into and hold data those customers care about. The criteria below are indicative, and final eligibility is confirmed during the application.
Founded Recently
Within the last five years.
Small Team
Fewer than 50 employees.
Early Funding
Total funding under the ceiling set in the current program rules.
Technology Sector
Operating in technology or a technology-adjacent sector.
Independent
Not a subsidiary of a larger organization that wouldn’t qualify itself.
Edge Cases
Later seed rounds, recent Series A graduates and pre-funding founders with a real customer surface are reviewed individually.
Real Platform Access on Startup-Friendly Terms.
Pricing
Discounted Platform Access
A discount on standard pricing, scaled to your stage. It applies to each module your scope needs, from External Attack Surface Management to Deep Search & Insights.
Onboarding
A Working Session
A Deepinfo solutions engineer scopes monitoring to your environment, sets up notifications around how your team works and walks through what matters at your stage.
Roadmap
A Line Into the Roadmap
Program members join an early-feedback channel for roadmap input. What early-stage operators report there is read and considered, with no guarantee that a given feature ships.
Graduation
A Clean Way Out
When funding, headcount or scope crosses the program thresholds, you move to standard pricing at renewal. Nothing changes mid-term.
Evidence for the Review You Can’t Skip.
Before an enterprise customer signs, its security questionnaire asks how you track your external exposure. A policy document answers that question weakly. An inventory with dated findings answers it well.
The platform builds the inventory from your primary domain, maps each issue to the frameworks questionnaires cite, and produces the reports as PDF.
- Inventory: domains, subdomains and IPs, discovered from your primary domain
- Scanning: all layers on all assets, each with its own history
- Prioritization: every CVE ranked with CVSS, EPSS and CISA KEV together
- Frameworks: OWASP Top 10 2021, PCI DSS 4.0 and 3.2, HIPAA, CWE, CAPEC, WASC
- Reports: PDF, from an executive summary to issue detail
Scanall checked
app.acme.example
-
WHOIS
whoisacme.example · renews in 41 days
snapshot 2026-09-24
-
IP WHOIS
ipwhoisAS64500 · 198.51.100.0/24
snapshot 2026-09-24
-
DNS
dnsA 198.51.100.24 · MX mail.acme.example
snapshot 2026-09-24
-
SSL
sslapp.acme.example · expires in 9 days
snapshot 2026-09-24
Medium -
Ports
port_scan443/tcp · TLS 1.3
snapshot 2026-09-24
-
Web data
webdatalogin page
snapshot 2026-09-24
-
HTTP
http200 · response headers
snapshot 2026-09-24
From Form to Platform Access.
-
01
Apply
Send the form below with the details it asks for, so eligibility can be checked without a back-and-forth.
-
02
Eligibility review
A Deepinfo team member checks the details against the criteria. A complete application needs nothing more; edge cases get a short follow-up conversation.
-
03
Contract and onboarding
Once approved, you sign a standard contract at program pricing and get platform access and your onboarding session.
Apply for the Startup Program.
Only your email is required. The review goes faster with the details below, so put them in the message field.
- Founding date and country
- Funding stage and total raised
- Headcount
- What you build, and who your customers are
- Your primary domain
- Not sure you qualify
- Ask us first
Done
Application Received
Thanks. We review every application and respond within a few business days.
Questions Founders Ask Us.
How large is the discount?
It depends on your stage and scope, and you see the number in your quote. We don’t publish percentages because they vary with the scope you monitor.
We don’t have a security team yet. Is that a problem?
No, the program is built for that situation. The onboarding session sets the platform up so a founder or an engineer can own it, with notifications for the events that need action.
Do we need to install anything?
No. Discovery and scanning run from the internet against what your domains and IP addresses already expose, so there is no agent to deploy and no access to grant.
Can we see results before we apply?
Yes. Book a demo: before the call we run discovery and a first scan against your primary domain, so the walk-through opens on your own assets and the findings on them.
Get the Platform Before You Need It.
Apply for the Startup Program. If you’re not sure you qualify, ask us first: borderline cases are reviewed individually.