Opportunities › Self-hosted network reconnaissance and attack surface management › Proposed app
Outpost Ledger
Your own attack surface map, built from your scans, kept on your servers
- Score
- 30
- confidence 57
- Evidence
- 10
- items on the page
- Rivals
- 4
- named in sources
- First version
- 35 d
- estimate
- Type
- Desktop app
- PWA: runs in the browser, installs on Mac and Windows
- Market since
- 2009
- Mature market · AI estimate
ScreensConcept
Desktop app: Security teams review attack surface maps, scan results and DNS history in sustained analysis sessions requiring detailed dashboards and search. Sample screens on a computer, in the proposed brand. Their numbers are sample data.
Surface
9 need review214 hosts
About this appAI proposal
Outpost Ledger is a self-hosted web app that gathers results from the scanners you already run, such as Nmap, Masscan, Zeek, p0f and ProjectDiscovery tools, into one searchable record of your external assets. It also keeps passive DNS history, so you can see what changed and when.
It is for security teams, penetration testers and infrastructure engineers who want the view hosted services give, without sending sensitive network data to a third party. You run it on your own infrastructure and keep the data.
Unlike a pile of scan files, it gives one place to search, compare and set watches. Unlike hosted platforms, there is no per-query meter and no data leaving your network. A managed install is offered for teams that prefer not to operate it.
- Tagline
- Know your outside edge. Keep the data inside.
- Voice
- PreciseCalmPlainspoken
- Why this name
- An outpost watches the edge of your territory; a ledger keeps a record. Together they describe a kept, private record of your external surface.
In the first version
Members say which features they would use. It tells PWAS what people want; it changes no score.
One import for many scanners
Bring in Nmap, Masscan, Zeek, p0f and ProjectDiscovery output. Results merge into one record per host and port.
No member yet
Passive DNS history
See which names pointed at which addresses over time, and spot forgotten subdomains and moved services.
No member yet
Map of your external surface
Group hosts by domain, network range or owner team. Mark which assets are known and which are new.
No member yet
Change watches
Get alerted when a new port opens, a service version changes or a new host appears in a range you own.
No member yet
Brand identityAI proposal
Check the name against trademark registers before using it.
Palette
#14232BDeep Slate · primary#F4F1EAPaper · surface#1B2428Ink · text#E0A030Signal Amber · accent#2F8F83Sea Teal · data
Typography
Aa
Outpost Ledger
ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789
Know your outside edge. Keep the data inside.
PricingAI proposal
Shodan's pricing page lists 4 paid plans from $69 to $1,099 a month; Censys lists prices on request. Tiers here sit below Shodan's entry plan as a starting point to test.
Self-host
Free
- Core import and search
- Passive DNS history
- Single team
- Community support
Team
$49 a month
- Change watches and alerts
- Client report links
- Up to 10 users
- Email support
Managed
$149 a month
- We host and update it
- Daily backups
- Up to 25 users
- Priority support
Would you pay Team · $49 a month?
Your answer tells PWAS which prices people accept. It changes no score.
No answers yet.
What it could be worthEstimate
What a software business making this much sells for today, from real deals. Pick a monthly revenue.
If it makes
Worth about
$194,000
Sale range $132,000 to $263,000
$120,000 a year in revenue
From 87 software businesses listed and sold on Empire Flippers in the last year, revenue vetted by the broker: they sell for about 19× their monthly revenue, most between 13× and 26×.
Measured on profit, the middle deal is 32× monthly net profit: about 2.7 years of profit.
An estimate, not an offer or financial advice. A real price depends on profit, growth, churn, how much of the work is the owner's, and the buyer.
How it would growAI proposal
How the product would reach new customers through its own use, and how the first ones would be found. A plan to test, not a result.
- Built-in loop
- Shared outputs. Pentesters send clients a read-only report link with the product's name on it. Clients see findings and can learn where they came from.
- Do they become customers?
- Clients are often security or IT leads who could buy it. Test whether report views lead to trials or installs.
- First customers
- Independent penetration testers and small security consultancies of 2 to 15 people who run Nmap and ProjectDiscovery tools for client engagements.
- Where to reach them
- GitHub and open-source communities: Offer import helpers and a guide for users of the existing open-source recon tools.
- Security forums and meetups: Share a demo of one client report built from raw scan files.
- First milestone
- Ten consultancies running it on real engagements and five paying for the Team plan within 90 days.
Why people already pay for this
- VerifiedGitHub repository gained 4167 stars in 4409 days
- Public claimOrganizations want to build self-hosted alternatives to expensive commercial network reconnaissance platforms.
- Public claimUsers want to run their own external attack surface management tools rather than rely on commercial vendors.
- Public claimOrganizations want control and privacy over network intelligence data instead of sending it to third-party services.
- Public claim
Tech stack
Every proposal builds on the same PWA base, installable from the browser on any phone or computer. Dashed boxes are what this app adds.
- AppNext.js and TypeScript
- PWAManifest and service worker
- UITailwind CSS
- Data and authSupabase Postgres
- PaymentsStripe
- EmailResend
- HostingVercel
- This app · Search indexSelf-hostable search engineFast filtering across large scan result sets.
- This app · Background jobsQueue and worker for importsParsing large scan files must not block the app.
- This app · Packaging
RisksAI inference
- CommercialThe open-source project named in the material already covers this ground for free. Paying demand for a polished, supported layer is untested.
- TechnicalScanner output formats vary and change between versions. Parsers need steady upkeep.
- RegulatoryScanning networks you do not own may be unlawful. The product must steer users to scan only assets they are authorised to test.
- DataWithout a global internet-wide scan, it only shows what users scan themselves, so it does not replace Shodan-style search of the whole internet.
- PlatformA PWA for self-hosted deployment must run behind customers' own networks and certificates, which adds support work.
Everything marked AI proposal or AI inference was written by a model from the evidence on the opportunity page. The proposed name must be checked against trademark registers before it is used.