Request demo

Startup Program

Exposure Management at Startup Pricing.

Most startups meet external attack surface management at the wrong moment: after an incident, during an audit, or when a customer’s procurement team won’t sign without evidence. The Startup Program gives qualifying early-stage companies the Deepinfo Platform earlier, on terms sized to their stage.

A procurement questionnaire

How do you track your external exposure?

Quarterly review

The platform answers, acme.example

The platform answers, acme.example
Inventory domains, subdomains and IPs from your primary domain
Findings each with a date
Frameworks OWASP Top 10 2021 · PCI DSS 4.0 · HIPAA · CWE
Report a PDF report

Built for Companies Building Real Things.

Venture-backed or bootstrapped, the program is for companies that already run a product customers log into and hold data those customers care about. The criteria below are indicative, and final eligibility is confirmed during the application.

Founded Recently

Within the last five years.

Small Team

Fewer than 50 employees.

Early Funding

Total funding under the ceiling set in the current program rules.

Technology Sector

Operating in technology or a technology-adjacent sector.

Independent

Not a subsidiary of a larger organization that wouldn’t qualify itself.

Edge Cases

Later seed rounds, recent Series A graduates and pre-funding founders with a real customer surface are reviewed individually.

Real Platform Access on Startup-Friendly Terms.

Pricing

Discounted Platform Access

A discount on standard pricing, scaled to your stage. It applies to each module your scope needs, from External Attack Surface Management to Deep Search & Insights.

Onboarding

A Working Session

A Deepinfo solutions engineer scopes monitoring to your environment, sets up notifications around how your team works and walks through what matters at your stage.

Roadmap

A Line Into the Roadmap

Program members join an early-feedback channel for roadmap input. What early-stage operators report there is read and considered, with no guarantee that a given feature ships.

Graduation

A Clean Way Out

When funding, headcount or scope crosses the program thresholds, you move to standard pricing at renewal. Nothing changes mid-term.

Evidence for the Review You Can’t Skip.

Before an enterprise customer signs, its security questionnaire asks how you track your external exposure. A policy document answers that question weakly. An inventory with dated findings answers it well.

The platform builds the inventory from your primary domain, maps each issue to the frameworks questionnaires cite, and produces the reports as PDF.

  • Inventory: domains, subdomains and IPs, discovered from your primary domain
  • Scanning: all layers on all assets, each with its own history
  • Prioritization: every CVE ranked with CVSS, EPSS and CISA KEV together
  • Frameworks: OWASP Top 10 2021, PCI DSS 4.0 and 3.2, HIPAA, CWE, CAPEC, WASC
  • Reports: PDF, from an executive summary to issue detail

Scanall checked

app.acme.example 198.51.100.24

  1. WHOISwhois

    acme.example · renews in 41 days

    snapshot 2026-09-24

  2. IP WHOISipwhois

    AS64500 · 198.51.100.0/24

    snapshot 2026-09-24

  3. DNSdns

    A 198.51.100.24 · MX mail.acme.example

    snapshot 2026-09-24

  4. SSLssl

    app.acme.example · expires in 9 days

    snapshot 2026-09-24

    Medium
  5. Portsport_scan

    443/tcp · TLS 1.3

    snapshot 2026-09-24

  6. Web datawebdata

    login page

    snapshot 2026-09-24

  7. HTTPhttp

    200 · response headers

    snapshot 2026-09-24

From Form to Platform Access.

  1. 01

    Apply

    Send the form below with the details it asks for, so eligibility can be checked without a back-and-forth.

  2. 02

    Eligibility review

    A Deepinfo team member checks the details against the criteria. A complete application needs nothing more; edge cases get a short follow-up conversation.

  3. 03

    Contract and onboarding

    Once approved, you sign a standard contract at program pricing and get platform access and your onboarding session.

Apply for the Startup Program.

Only your email is required. The review goes faster with the details below, so put them in the message field.

  • Founding date and country
  • Funding stage and total raised
  • Headcount
  • What you build, and who your customers are
  • Your primary domain
Not sure you qualify
Ask us first

Questions Founders Ask Us.

How large is the discount?

It depends on your stage and scope, and you see the number in your quote. We don’t publish percentages because they vary with the scope you monitor.

We don’t have a security team yet. Is that a problem?

No, the program is built for that situation. The onboarding session sets the platform up so a founder or an engineer can own it, with notifications for the events that need action.

Do we need to install anything?

No. Discovery and scanning run from the internet against what your domains and IP addresses already expose, so there is no agent to deploy and no access to grant.

Can we see results before we apply?

Yes. Book a demo: before the call we run discovery and a first scan against your primary domain, so the walk-through opens on your own assets and the findings on them.

Get the Platform Before You Need It.

Apply for the Startup Program. If you’re not sure you qualify, ask us first: borderline cases are reviewed individually.