Your counterparties have
infrastructure you can't see.
We documented it.
8,294 fiduciary firms evaluated. Every domain. Every email authentication record. Every security header. The findings are in the registry — the reports put them in your hands.
Request a ReportWire fraud is not a cyberattack. It is a communication failure. A fraudster impersonates a firm with a spoofable domain. The instruction looks legitimate. The wire goes out. It does not come back. The infrastructure gap that made it possible is in this registry — documented, firm by firm.
The exposure is not theoretical.
Passive DNS findings from the live Assessment Registry. No active scanning. No intrusion. Every number below is derivable by anyone with a terminal. The difference is we did it at scale, across every sector, and published it.
of evaluated firms have no CAA records — allowing any certificate authority to issue SSL certificates for their domain without authorization.
are missing HSTS headers — leaving client connections open to SSL stripping and downgrade attacks during wire instruction exchanges.
lack the full security header suite — no CSP, no frame protection, no referrer policy. Basic controls absent from firms managing client wire instructions.
have no enforced HTTPS — clients accessing firm portals may connect over plain HTTP. Wire instructions travel without transport encryption.
Findings from passive DNS and header evaluation of the live Assessment Registry. Updated continuously.
Know before you wire.
Every report is built from the live registry — not a static snapshot. Firms are identified by domain. Findings are documented. The data is already there. You're paying for it to be packaged, interpreted, and delivered to your desk.
Complete access to every sector report — all geographies, all firm types — updated quarterly. Designed for institutional compliance teams conducting ongoing counterparty due diligence.
- All sectors & geographies
- Quarterly registry updates
- PDF + CSV + raw data
- New sectors added automatically
- Suitable for LP disclosures & regulatory filings
Ongoing monitoring of a specific counterparty population — an LP base, a custodian's RIA book, a fund's vendor network. Real-time alerting when status changes.
- Custom firm population
- Real-time change alerts
- API access to registry data
- Dedicated analyst support
- Quarterly executive briefing
Full population report for one sector and geography. Every evaluated firm, aggregate statistics, gap distribution, and firm-level detail. Current registry at delivery.
- One sector + geography
- All firms, all findings
- PDF + CSV delivery
- Investment committee ready
Single-firm report on one domain. Standard 1 and 2 evaluation detail, sub-requirement breakdown, sector comparison, and plain-language finding summary. 48-hour delivery.
- One domain evaluated
- All 5 standards covered
- Sector benchmark comparison
- PDF delivery in 48 hours
Start your due diligence.
Submit your request below. Wire instructions are returned within one business day. Delivery follows payment confirmation. Reports are built from the live registry at the time of delivery.
All fields marked * are required. Wire instructions will be sent to the email you provide.
Or contact directly: [email protected] · 305-980-7229