For CFOs, controllers and finance leaders
Stop the fake invoice before it reaches accounts payable.
Payment-change scams and spoofed invoices are a finance problem that starts as a DNS problem. PixelPrivate checks whether criminals can send email as your company, whether lookalike domains are being registered, and gives you a report for the board and the insurer.
No credit card. Passive checks only. We never change your systems.
What keeps you up at night
The worries we hear most from this seat
A "new bank details" email looks legitimate
Wire and invoice fraud often arrives from a domain that is nearly identical to a supplier’s or to yours. Finance teams see dozens of such messages a year, and one gets through.
Your own domain is used to defraud your customers
When anyone can send mail as you, your customers get fake invoices with your name on them and your relationship pays for it.
The insurer’s application asks about controls
Premiums and eligibility increasingly depend on answers about email authentication and exposed services. Finance signs the form, so finance needs evidence.
Vendor risk is a spreadsheet of hope
You rely on dozens of suppliers whose basic hygiene you cannot see. Sending questionnaires gets you self-reported answers at best.
The board asks "are we secure?"
You need a defensible, repeatable answer with dates and trend, not a reassurance from whoever you asked last.
What PixelPrivate does about it
Specific checks and monitoring, mapped to those worries
Everything marked Available today works now. Anything marked Roadmap is planned and not yet released.
Email authentication verification
SPF, DKIM and DMARC are checked against your live DNS. An enforcing DMARC policy is the main control that makes direct spoofing of your domain much harder.
See email checksLookalike domain monitoring
Brand Shield watches for newly registered domains that resemble yours, the raw material of payment-change and invoice scams, and alerts you.
See Brand ShieldExternal scan and monitoring
Eighteen checks of internet-facing configuration, re-run on a schedule, with alerts on change so drift is caught early.
See exposure scanningShareable reports for insurers and the board
A clean summary of current external posture and progress, suitable to attach to an insurance application or a board pack.
Insurance readinessSupplier risk scoring
Outside-in hygiene scores for the vendors you pay, to prioritise which ones to ask harder questions of.
See the roadmapIllustrative scenario — not a customer story
A finance team of five handling hundreds of supplier payments
Picture a mid-sized company whose accounts payable team processes supplier invoices every week. The controller connects the company domain to see what a criminal would see.
A scan like this typically reveals whether DMARC is merely monitoring or actually enforcing, and whether every legitimate sender is covered. Brand Shield may also show a few lookalike domains with one character swapped, which is exactly the pattern used in payment-change requests.
The controller does not stop at technology: the finding is paired with a callback-verification rule for any change to bank details. The tool narrows the opening for spoofing; the process catches what remains.
What a scan like this commonly surfaces
- DMARC policy not enforcing
- Lookalike domains with one-character swaps
- Sender not covered by SPF
- No alert path when records change
This is a generic example written to explain what the product does. It describes no real company, person, quote or statistic.
Executive summary report
Evidence for the insurer and the audit committee
The shareable report records your external email and exposure posture at a point in time, with dates, so you can show what was true when and what you did next.
See how reports workA shareable report includes
- Email authentication status
- Open findings by priority
- Dated progress between scans
Describes external posture only. It is not an audit or a certification.
What we do not do
Honest limits, so you know exactly what you are buying
- PixelPrivate does not detect business email compromise inside a mailbox and does not read your email.
- It cannot stop a fraudster who uses a different, unrelated domain or a compromised supplier account. Payment verification procedures remain essential.
- It does not score or audit your suppliers today; supplier scoring is on the roadmap.
- It is not an audit, a certification or an insurance guarantee.
Read the full methodology and limits. See pricing for plans.
Questions from cfos and finance leaders
Will DMARC stop all invoice fraud?
No. An enforcing DMARC policy makes it much harder to send mail that directly impersonates your exact domain. It does not stop lookalike domains, compromised supplier mailboxes or social engineering, which is why verification of payment changes by phone matters.
Can I give the report to my cyber insurer?
You can share it as supporting evidence of external posture. Insurers make their own decisions, and the report does not guarantee coverage or premiums.
Does it monitor our suppliers?
Not yet. You can scan domains you own or are authorized to assess. Supplier risk scoring is on the roadmap and labelled that way.
Does PixelPrivate see our email or our bank information?
No. It checks public DNS and web configuration only. It never asks for mailbox access or financial data.
How often should finance review this?
A reasonable cadence is a review after every material change to email providers, and a quarterly look at trend. Monitoring alerts cover the gaps between.
See what the internet sees of your business
Enter your domain for a free check, or start the 14-day trial to unlock monitoring, Brand Shield and shareable reports.
No credit card · Cancel anytime · Reverts to the Free plan automatically