Hi Product Hunt 👋 I'm David, and I built Hookgap. What inspired it: small MSPs (1–10 people) are great at fixing IT and short on time for sales. The cold emails that work open with something specific about the prospect's own business, like "anyone can currently send email pretending to be @yourfirm.com". That information is already public: it's in DNS, certificate logs and the homepage. Nobody had packaged it at a price a one-person MSP can justify. The main tool in this space starts at $199/month. The problem I was trying to solve: turn a domain name into a report a non-technical business owner can read in two minutes, with the MSP's own logo on it, so the MSP has a credible reason to start a conversation. How the approach evolved: • I started with "security scanner" and quickly cut anything active. Hookgap is passive only: DNS, certificate transparency logs, RDAP and one homepage request. No port scans, no logins, no probes, so it's safe to run before anyone has signed anything. • I took AI out of the reports. Every sentence comes from reviewed templates, so a report never invents a problem, and it never uses fear words like "hacked" or "vulnerable". • I added the parts MSPs asked for next: bulk checks (paste 50 domains, sorted worst-first), weekly rescans with "why now" alerts to Slack, Teams or Discord, and outreach copy built from the top two gaps. • It runs entirely on Cloudflare's free tier, which kept the price low. Pricing: free to try (3 checks a day, no sign-up), Solo $39/month, Team $99/month. Founding partners get the first year for $199, limited to 25 seats, closing October 30. Please run it on your own domain first and tell me what it gets wrong. False positives are the most useful feedback I can get right now.

Hookgap

Turn a prospect's security gaps into a sales conversation

Turn a prospect's security gaps into a sales conversation