Animated shield with a risk gauge needle sweeping back and forth and a grade badge cycling through letter grades

Network Security Posture

Find the network misconfigurations attackers actually exploit - SMBv1 still enabled, a Telnet server running, RDP without Network Level Authentication, weak public-profile firewall rules, high-risk ports exposed - risk-scored (0-100, graded A-F).

Most network breaches don't start with a zero-day - they start with a machine still running SMBv1, a Telnet server nobody remembered to turn off, or a firewall profile that quietly went from Private to Public. Network Security Posture scans a target machine (or your own, if left blank) for nine specific misconfigurations attackers actually exploit, and rolls them up into a single Network Risk Score (0-100, graded A-F) so you know where you stand at a glance. Every finding - regardless of type - lands in one unified list with 17 built-in queries: severity filters, per-finding-type views, and text/host searches. Build your own queries with custom filter conditions, export to CSV, Excel, HTML, XML, or the clipboard, and schedule any of it to run - and email itself to you - unattended.

Screenshot

See it in action

The real app. Click to zoom in, hover the markers to see what each part does.

Network Security Posture showing a real scan of this machine: Network Risk Score 66/100 (Grade C), 16 findings, 1 Critical and 15 Low
Click to zoom

Hover a marker for details, or click the screenshot to zoom in.

Network Security Posture, zoomed in
Features

The checks that actually matter

Nine real, live checks

SMBv1, Telnet server, RDP without NLA, weak/disabled firewall profiles, high-risk exposed ports, unencrypted management protocols, stale ARP entries, and unexpected DHCP servers - checked directly against real Windows APIs, registry, and WMI.

Network Risk Score, 0-100 graded A-F

A single number and letter grade that rolls up every finding by severity, so you can track posture over time and know instantly if something got worse.

17 built-in queries, one unified list

Severity filters, per-finding-type views, and text/host searches - no separate tab per check, since every finding shares the same reportable shape.

Custom queries & attributes

Build your own query from filter conditions on any attribute, and register extra attributes under a friendly display name via Manage Custom Attributes.

Multi-format export

CSV, Excel, HTML, XML, plain text, or straight to the clipboard - whatever your compliance or audit workflow needs.

Scheduled & emailed reports

Save any query as a recurring report via Windows Task Scheduler, with the result optionally emailed to you afterward - or drive it yourself with NetworkSecurityPosture.exe --run-report ... and --run-query ....

Plans & Pricing

Each tier unlocks more

Pick how much automation you need, then choose once-off or monthly billing. Network Security Posture licenses per machine.

One-time payment - yours to keep, no subscription.

Standard

For the cheap, always-on checks.

SMBv1, Telnet server, and RDP-without-NLA findings, on screen, free at every tier.

Standard+

For firewall posture.

Everything in Standard, plus firewall-profile findings and CSV/Text export.

Advanced

For the full picture.

Everything in Standard+, plus ARP/DHCP findings, custom queries, and richer export formats.

Prices are shown in USD as the reference figure. Other currencies, including the ZAR amount PayFast actually charges, are converted using a live exchange rate.

Loading live exchange rates...

Standard

Standard covers the cheapest, always-on checks: SMBv1 enabled, Telnet server running, and RDP without NLA - all on screen. No firewall-profile findings or export at this tier, by design.

Best for: Anyone who needs a fast answer to "is this machine running something obviously dangerous?"

Standard+

Standard+ adds weak/disabled firewall-profile findings and high-risk-port exposure, plus CSV/Text report export. Everything from Standard is included.

Best for: Day-to-day posture monitoring across a fleet of machines.

Advanced

Advanced adds stale-ARP and unexpected-DHCP-server findings, custom queries with Manage Custom Attributes, and Excel/HTML/XML/clipboard export. Everything from Standard+ is included.

Best for: Security teams building their own posture-compliance reports.

Prices shown are a suggested starting point, not final quotes - contact us to confirm your plan.

Interested in Network Security Posture?

Contact us for current pricing and licensing options.

Contact us