Client Posture vs ConnectSecure: passive posture checks vs full vulnerability management

ConnectSecure, which says it was founded in December 2020 as CyberCNS and rebranded in October 2022, is a vulnerability and compliance management platform built for MSPs. Client Posture is a passive external posture check that turns its findings into branded Security Briefs and proposals. They overlap a little on the outside and differ a lot on the inside.

The short version

Client Posture reads public information only, from a domain name. Its Security page lists the signals: DNS over HTTPS, certificate transparency logs, domain registration (RDAP) data, TLS handshake metadata, and one normal request to the homepage. It says Client Posture does not "port scan, brute-force paths, probe vulnerabilities, attempt logins, crawl beyond the homepage, or send exploit payloads." There's no agent and no credentials. The scan feeds a branded Security Brief for prospects, and on Pro, a Good / Better / Best proposal the client accepts online. Because nothing touches the prospect's systems beyond reading public records and loading the homepage, you can run it before they've agreed to anything.

ConnectSecure scans actively, inside and outside. Its MSP page describes two agent types: a "lightweight agent, which runs on the machine itself and scans that device," and "the probe, which scans the network." Agents aren't strictly required for vulnerability scanning. ConnectSecure says it "can scan endpoints remotely using credentials, typically from a domain controller or probe," but recommends an agent on every endpoint "for better performance and more capabilities, like patching." For the outside, it offers agentless external scanning ("Scan externally. No agents. No installs."), which surfaces "open ports, certificate and cipher issues, and identifiable system details."

So both can look at a client from the outside without installing anything. The difference is method. ConnectSecure's external scan actively checks internet-facing assets, including ports. Client Posture doesn't port scan at all and stays with public records plus one homepage request.

Comparison table

Where ConnectSecure is the better fit

• Ongoing vulnerability management. Continuous scanning of endpoints, servers and network devices, prioritized with EPSS, CVSS and CISA KEV, is the core of what ConnectSecure lists. Client Posture doesn't do vulnerability scanning.
• Patching. ConnectSecure lists operating system and third-party application patching. Client Posture has none.
• Internal network visibility. The probe covers devices that can't take an agent, such as "printers, switches, routers, and other IoT devices."
• Active external testing. If you need to know which ports and services are open on a client's internet-facing IPs, ConnectSecure's external scan does that, and Client Posture deliberately doesn't.
• Microsoft 365 and Google Workspace assessments that need authenticated access, and Active Directory and Entra ID scanning.
• Ticketing across a wide PSA and RMM stack, including agent deployment from Datto RMM and NinjaOne.

Where Client Posture is the better fit

• Prospecting before there's any relationship. Scan prospect domains in bulk (150 prospect scans a month on Pro and Founding Partner), with no access to request and no active scanning of their systems.
• Email security as the opener. SPF, DKIM, DMARC, MTA-STS, TLS reporting, and email platform detection, explained in plain English.
• Findings to a signed proposal. On Pro, each finding maps to a service in a 48-service library, and the client accepts a Good / Better / Best proposal online. Client Posture doesn't process the client's payment.
• Insurance renewals. A 14-question insurance questionnaire on every plan, with each answer labeled Verified by scan, Confirmed by IT provider, or Confirmed by client.
• Nothing to deploy. Useful when you can't, or don't yet want to, put software on a client's machines.

Using them together

One way to combine them: use Client Posture to open the conversation with a passive Brief and an email-security proposal, then, once the client signs and grants access, deploy ConnectSecure for continuous internal and external vulnerability management and patching.

Try the passive check

Scan a prospect's domain free →

No signup to scan. Public information only. When you're ready, 7 days of Pro, no card. See pricing →

Founding Partner: $1,999, one time. It includes 50 client domains with your logo and colors, weekly rescans and change alerts, unlimited Security Briefs (150 prospect scans a month), the Grow toolkit, the Policy library, a branded service menu, webhooks, the API, and MCP access (except quote drafts). Proposals and the Service Library require Pro. If you later subscribe to Pro, you pay $299/mo instead of $399 for as long as that subscription stays active. The offer is capped at 50 seats and closes Dec 15, 2026, or sooner if all 50 seats are claimed. See Founding Partner details →