Public exposure
A company may reveal more technical information than its owner realizes. Public availability does not itself mean an incident, but organizations should know what can be seen.
AN NGITECH PROJECT · CYBERSECURITY AND AWARENESS
Observatory — understand what the Internet reveals about your company.
Observatory is an information and analysis project developed by NGITECH. It helps business owners understand the public visibility of their domain, website and email infrastructure, and the risks that may arise from outdated, incorrect or insufficiently protected elements of their online presence.
policyThe project does not perform penetration testing and does not attempt to gain unauthorized access. It works only with publicly available technical signals.
WHY IT EXISTS
Online visibility supports business, but it also creates an exposure surface.
A website, domain, email infrastructure and public technical configuration are available every day not only to customers. They can also be examined by automated scanners, people looking for weaknesses and criminals impersonating companies. Observatory was created to explain these relationships calmly, accurately and without fear-based messaging.
The domain as company identity
A domain connects the website, email and brand recognition. Configuration errors can reduce trust or make impersonation easier.
Small omissions, wider consequences
An expired certificate, missing email protection or a broken form may be a minor technical issue, yet it can lead to lost trust, enquiries or data.
Awareness before reaction
The project helps organizations understand their situation and establish priorities before a real incident or costly outage occurs.
HOW IT WORKS
From a public technical signal to information a business owner can understand.
Observatory combines automated technical measurements, structured evidence assessment and human review. Its purpose is to identify areas worth checking, not to issue categorical verdicts.
01
Public information
The system observes only data available without authentication and without bypassing security controls.
02
Technical analysis
Checks include HTTP responses, DNS, TLS, email protection and the basic condition of a website.
03
Evidence quality
Each result includes a confidence level and an explanation of the factors behind it.
04
Human review
Supporting recommendations never replace the decision of the person reviewing the evidence.
05
Clear information
The report explains what was observed, why it may matter and who should review the finding.
OBSERVATION AREAS
The project examines an online presence from several complementary perspectives.
Domain and DNS
Domain availability, DNS records, expiry dates and core elements that influence service continuity.
TLS and connection security
Certificate validity, encrypted connections and signals that may reduce browser or user trust.
Email security
Public SPF, DMARC and related mechanisms that reduce the risk of impersonating a company domain.
Website condition
Availability, redirects, essential metadata, forms, links and signs of problems that affect contact with the company.
Public dependencies
Visible technologies and relationships between services that may require updates or additional review.
Digital credibility
Signals that may influence how customers, partners, email systems and search engines perceive the organization.
PROJECT PRINCIPLES
Observatory is designed to inform and educate, not to apply pressure.
Public data only
The project examines publicly available information. It does not bypass authentication, security controls or access restrictions.
No intrusive activity
We do not attempt unauthorized access, run active vulnerability tests or perform actions that could disrupt the service being observed.
Careful conclusions
When evidence is not conclusive, the assessment remains inconclusive. Uncertainty is communicated explicitly.
A human makes the decision
Automation and AI may organize information, but they do not approve findings or publish them independently.
No fear-based language
Communication explains the potential issue and reasonable next steps without accusations, pressure or sensational claims.
A report can be disabled
A public document may be disabled. The project limits exposed information to what is necessary to understand the observation.
AI AS A SUPPORTING LAYER
Artificial intelligence does not replace technical measurement or human responsibility.
Observatory is based on deterministic technical observations. AI may help assess evidence consistency, indicate false-positive risk and organize information. It does not alter technical results, publish a report or send a message without a human decision.
- check_circletechnical results remain separate from AI recommendations
- check_circleevery recommendation requires human review
- check_circleuncertain evidence is marked as incomplete or inconclusive
- check_circlecontent collected from a website is treated as untrusted evidence, never as an instruction
WHO IT IS FOR
For organizations that want to better understand their online presence.
The project is intended primarily for small and medium-sized business owners, people responsible for websites and email, management teams, social organizations and institutions without their own cybersecurity team.
Business ownersManagement and administrationPeople responsible for ITSmall teams without security staffOrganizations and institutionsTrusted technical partners
IMPORTANT LIMITATION
Observatory provides information; it does not replace an audit or a specialist.
Observing public signals can reveal an area that deserves attention, but it is not a complete security audit, penetration test or guarantee that no vulnerabilities exist. A report should be shared with the person responsible for IT or cybersecurity, or with a trusted specialist who can assess the context and plan corrective work.
“
THE GOAL
Greater online visibility should be accompanied by greater awareness of what is public, who may use it and what should be checked regularly.
Observatory turns technical signals into calm, understandable information. It does not look for someone to blame. It helps identify a concern, pass it to the right person and make an informed decision.
ABOUT THE PROJECT
Observatory is developed by NGITECH in Wroclaw, Poland.
The project is built on years of experience in designing and maintaining IT systems for businesses and working in cybersecurity within public-utility organizations, including an essential-services operator environment. This experience includes threat analysis, monitoring the security of IT infrastructure, supporting Security Operations Center (SOC) processes and building tools that help identify and assess risk.
NGITECH also develops TraceScam.com, a proprietary system that supports the analysis of suspicious emails, text messages, links, fake online stores and other fraud attempts involving phishing and social engineering. Experience gained while developing TraceScam provides practical insight into how publicly available information about organizations can be used to prepare convincing impersonation and fraud attempts.
Observatory is not a penetration-testing or security-bypass tool. Its purpose is to improve awareness among business owners and people responsible for security by examining publicly available information about domains, email infrastructure and websites, and presenting the findings as calm, understandable recommendations.
The project combines experience in cybersecurity, web application development, data analysis and the responsible use of artificial intelligence. AI is used only as a supporting layer, while the final interpretation of results and any decision about further action always remain with a human reviewer. We believe that effective cybersecurity begins with awareness of an organization's own presence on the Internet.