Network and attack surface assessment, priced for MSPs and their clients alike

Device discovery, exposure scanning, and evidence-backed reporting in one platform, whether you're reselling it to a client roster or running it against your own network.

Evidence-first network discovery

An edge agent runs inside the client network to discover devices, pull configs, and sanitize sensitive data before anything leaves the building.

  • Automated device inventory via SNMP, SSH, ARP/LLDP discovery
  • Topology mapping of the observed network
  • Credentials stay local. Only sanitized results are uploaded
  • Works across every client tenant from one partner account

Attack surface & exposure scanning

Domain and subdomain discovery, port scanning, and an optional API-exposure check roll up into one risk score per client.

  • Passive and active discovery across every target domain
  • Subdomain autoscan finds what a client doesn't know is public
  • API/OpenAPI exposure discovery is included in Complete and available as an add-on on Essentials
  • One combined risk score per assessment
Subdomain 12 discovered
Risk score Low · 92/100
0 critical
API scan Docs exposed
Open ports 3 flagged

Reports clients actually read

Every finding traces back to real evidence, not a guess, so the value of the work is obvious before you even discuss remediation.

  • Business-ready reporting, not raw scan output
  • Exportable findings and evidence artifacts
  • 12-month evidence retention on every plan (36-month add-on)
Findings log Today

Report exported: Northstar Retail

Network assessment · 14 findings, evidence attached

9:14 am

Finding resolved: Meridian Dental

Open SMB port closed and verified

9:02 am

Critical finding flagged: Brightline Law

Publicly exposed admin login

8:47 am

Scan started: Coastal Dental Group

Attack surface · 2 domains

8:30 am

One partner account, every client tenant

MSP wholesale accounts cover as many isolated client tenants as you need under a single subscription and login.

  • Each client tenant's data is fully isolated
  • Wholesale pricing drops automatically as your roster grows
  • Client tenants can be allocated or deallocated as accounts change
  • Optional white-label reporting add-on
Prospect
Allocated
Active tenant
One wholesale subscription

Delegated access without full admin risk

Grant your team operator-level access to a specific client tenant instead of handing out platform-admin rights. Grants expire and everything is logged.

  • Operator is the highest grant ceiling. It never includes billing, ownership, or deletion
  • Grants are time-boxed and expire automatically
  • Every grant-sourced action is recorded in the audit trail
  • Revoke access instantly when a tech rolls off an engagement
6
Active grants
2
Expiring soon
1
Revoked
184
Audited actions
Grant-sourced access · Fully audited

Role-based access for every tenant

Owners, admins, operators, viewers, and billing admins each get exactly the access they need, no more and no less.

  • Owner: full control, including billing and ownership transfer
  • Admin: manage assessments and members
  • Operator: run and manage assessments
  • Viewer: read-only access for stakeholders who just need visibility
  • Billing admin: manage billing without operational assessment controls
Tenant roles
Role
Assess
Grants
Billing
Owner
Admin
Operator
Viewer

A fifth role, Billing admin, manages payment without assessment access. Each tenant's data is fully isolated.

See Lens on a real network

Request a walkthrough and we'll show you a live assessment. If you're reselling, we'll cover the MSP partner dashboard and wholesale pricing. If you're assessing your own network, we'll show you the single-account setup.

Request demo
See pricing
emberix

Emberix builds affordable SaaS tools for the small and mid-sized businesses other platforms ignore. Lens brings network and attack-surface assessment to MSPs that want to resell it and direct customers assessing their own networks.

Built by people who've run MSPs

Product

Company

Legal

© 2026 Emberix. Built for MSPs, their clients, and direct customers alike.

Lens is an Emberix product operated by CVP. Verto, CVP's billing and client-engagement platform for consultancies, is available separately at vertobill.com.

MSP-first