Francisco Quintero ← Back to portfolio
Product concept · Security posture

The security posture panel

Phylax looks at a company from the outside, the way an attacker would, and shows in one place where it is exposed. This panel brings together the exposure score, the email and DNS traffic lights, the attack surface map and the Watcher feed. What you see here is the product vision, not a finished version.

In progress · product concept
What it is

From scattered findings to a posture that watches itself

Phylax already has two real tools that work today, a live checker that reviews a domain's exposure on the spot, and the domain Watcher service that monitors it continuously. This panel is the product version of those two pieces, a single dashboard where reconnaissance work turns into a number, a set of traffic lights and a timeline. All reconnaissance is passive and pre-authorized, without touching or stressing the client's systems. The mockups below use the fictional domain cliente-ejemplo.cl, the data is illustrative.

PTES framework OWASP controls NIST reference Chilean cybercrime law 21.459 Passive reconnaissance
Block 01

Exposure score

A single number between 0 and 100 that sums up how exposed the organization is, with a verdict in plain words so a non-technical reader can follow it. The score drops when there are open doors and rises when they close. It helps decide where to focus first.

panel.phylax.cl/exposicion
72/100
Exposure
Moderate risk

Clear room to improve

The baseline is reasonable, but there are still gaps an attacker can use with little effort. Closing the three email ones lifts the score close to 85. None of them requires buying anything, just adjusting configuration.

0 to 49 critical 50 to 79 moderate 80 to 100 solid
Domain assessed cliente-ejemplo.cl · Last review 6 hours ago · 7 controls measured · 11 subdomains tracked

Sample score and verdict, calculated on a fictional domain to show the panel's format.

Block 02

Email and DNS traffic lights

Every email and domain control with its light in green, amber or red. This is where the risk almost nobody looks at lives, the misconfigured email that lets anyone impersonate the company and the headers that are missing. One glance is enough to know what is fine and what needs fixing.

panel.phylax.cl/correo-dns
DMARC
Missing the policy that prevents domain spoofing in email
p=none · no active rejection
Critical
SPF
Declares which servers may send email for the domain
v=spf1 with -all
Ok
DKIM
Signature present, but the key should be rotated due to age
active selector · 1024-bit key
Review
DNSSEC
No signature on DNS, the domain's resolution can be forged
no DS records
Critical
MTA-STS
Does not require inbound email to always travel encrypted
no published policy
Review
TLS
The site encrypts well and redirects all traffic to HTTPS
TLS 1.3 · grade A
Ok
HTTP headers
Missing security headers that harden the browser
no HSTS or CSP
Review

Sample states on cliente-ejemplo.cl. The technical records are illustrative, to explain what each traffic light checks.

Block 03

Attack surface map

The list of subdomains a company exposes without always knowing it, rebuilt from the public Certificate Transparency logs, the open archive where every issued certificate leaves a trace. Often you find test environments or internal panels nobody remembers publishing. That is the surface an attacker maps first.

panel.phylax.cl/superficie
11
Subdomains detected
8
With an active service
1
New this week
www.cliente-ejemplo.clPublic siteActive
correo.cliente-ejemplo.clEmailActive
tienda.cliente-ejemplo.clStoreActive
vpn.cliente-ejemplo.clRemote accessActive
dev.cliente-ejemplo.clTest environmentNew
old.cliente-ejemplo.clLegacy siteNo service
panel.cliente-ejemplo.clAdminActive

Sample subdomains on a fictional domain. The real source is Certificate Transparency, a public, read-only log.

Block 04

The Watcher feed

The Watcher monitors the domain continuously and flags when something changes. A certificate about to expire, a subdomain that appears out of nowhere, an email policy that weakened. Each event lands on a timeline with its severity level, so you can act before it becomes a problem. The one service with a set price, USD 30 per month per domain.

panel.phylax.cl/vigia
High2 h ago

The certificate for tienda.cliente-ejemplo.cl expires in 20 days.

Without renewal, the store will be marked as insecure in the browser
New1 day ago

A new subdomain appeared, dev.cliente-ejemplo.cl.

Detected in Certificate Transparency, worth confirming it should be published
Medium3 days ago

The DMARC policy dropped to p=none.

The domain became spoofable again, it used to reject forged email
Resolved6 days ago

An admin panel that was open to the public was closed.

panel.cliente-ejemplo.cl now requires access, the score rose 4 points

Sample alerts to show how the Watcher logs changes over time on a fictional domain.

Who it is for

Companies that want to know how they look from the outside

SMBs with a digital presence

They have a site, their own email and maybe a store, but nobody checks whether the configuration leaves gaps. The panel gives them a clear snapshot without needing an in-house technical team.

Teams that depend on email

Where a domain impersonation means fraud or deceived customers. The email traffic lights point straight at the risk almost nobody watches until it happens.

Organizations with a domain in plain sight

Brands, institutions or suppliers that expose several subdomains and need continuous monitoring. The Watcher flags a change before it becomes news.

Waitlist

Join before we open the first spots

The Phylax panel is in progress. I want to test it with real companies that want to see their exposure and put it in order. Leave your contact and I will let you know when we open access.

Join the waitlist →
ES