Client Posture vs Network Detective Pro: outside-in checks vs inside-the-network assessments

Network Detective Pro, from RapidFire Tools (a Kaseya company), and Client Posture both help MSPs turn security data into client-ready reports. They get that data in very different ways, and the difference decides which one fits a given job. There's no reason an MSP can't use both.

The short version

Client Posture works from a domain name and public information only. Its Security page lists exactly what it reads: DNS over HTTPS, certificate transparency logs, domain registration (RDAP) data, TLS handshake metadata, and one normal request to the homepage. It says Client Posture does not "port scan, brute-force paths, probe vulnerabilities, attempt logins, crawl beyond the homepage, or send exploit payloads." Nothing goes on the client's network, and no credentials are needed. Its playbook says plainly that it isn't "a penetration test, an internal vulnerability scanner, an agent, or a compliance certification."

The same scan feeds a branded Security Brief for prospects, and on Pro, a Good / Better / Best proposal priced from your Service Library that the client accepts online. Because it reads only public information, you can run it on a prospect before they've agreed to anything.

Network Detective Pro works from inside the network. RapidFire Tools describes it as using "non-intrusive data collectors, light-weight discovery agents, and powerful scanners." For a LAN scan, its help guide says to download the Data Collector and run it "on a PC on the target network" as an administrator, then give it domain credentials with administrative rights (or local admin credentials on a workgroup). In return, it sees things no outside check can: Active Directory, endpoints, Microsoft 365, SQL servers, AWS, and more, across a library RapidFire calls "One Hundred Reports."

Comparison table

Where Network Detective Pro is the better fit

• Deep internal assessments. If you need to know what's inside the network (Active Directory, endpoints, local security settings that deviate from Group Policy, or the Layer 2/3 network detail RapidFire's data sheet describes), you need something on the inside. Client Posture can't see any of that, and doesn't try.
• Documentation and onboarding. RapidFire positions its full detail reports, change reports and IT Glue integration for documenting client networks.
• Microsoft 365, Azure AD and AWS assessments that need authenticated access.
• Compliance work alongside Compliance Manager GRC, part of the same RapidFire family.
• A quick internal spot check without an install. RapidFire says its Cyberattack Risk Assessment can be run "by any end-user via a personal link" with "no installs."

Where Client Posture is the better fit

• Prospecting at scale. You can scan a list of prospect domains (150 prospect scans a month on Pro and Founding Partner) without asking anyone for access, then send a branded Brief built from what was verified.
• The first conversation. Client Posture only shows a fail when it has verified it. Anything it can't confirm is marked Unknown or Not tested, so a prospect never sees a false alarm with your logo on it.
• Going from findings to a signed proposal. On Pro, findings map to services in a 48-service library, and the client accepts a Good / Better / Best proposal online. Client Posture doesn't take the client's payment; your own payment link is shown after they accept.
• Email security and insurance season. SPF, DKIM, DMARC, MTA-STS and filtering checks, plus a 14-question insurance questionnaire where every answer is labeled by source.

Using them together

One way to combine them: lead with Client Posture's outside-in check to open the conversation, and once the client agrees to a paid assessment and grants access, run Network Detective Pro inside the network for the deep findings. The external check costs the prospect nothing and asks for nothing. The internal assessment is the paid next step.

Try the outside-in check

Scan a prospect's domain free →

No signup to scan. Public information only. When you're ready, 7 days of Pro, no card. See pricing →

Founding Partner: $1,999, one time. It includes 50 client domains with your logo and colors, weekly rescans and change alerts, unlimited Security Briefs (150 prospect scans a month), the Grow toolkit, the Policy library, a branded service menu, webhooks, the API, and MCP access (except quote drafts). Proposals and the Service Library require Pro. If you later subscribe to Pro, you pay $299/mo instead of $399 for as long as that subscription stays active. The offer is capped at 50 seats and closes Dec 15, 2026, or sooner if all 50 seats are claimed. See Founding Partner details →