Frequently Asked Questions
Everything you need to know about XertyFi.
Do I need an XMD to use XertyFi?
No. Basic and Standard customers can use XertyFi without purchasing a physical device. The XMD is an optional addition for these plans.
How much does the XMD cost with the Basic Plan?
Basic customers may purchase the XMD for a one-time price of $379.
How much does the XMD cost with the Standard Plan?
Standard customers may purchase the XMD for a one-time price of $249.
Is the XMD included with Premium?
Yes. Premium customers may receive an XMD at no upfront device cost by accepting a six-month minimum Premium subscription commitment.
What happens if I cancel Premium before six paid months?
You may return the XMD according to XertyFi's return instructions or keep it and pay a $249 device charge.
What happens after six paid months?
After six successful Premium payments, the commitment is complete and the XMD becomes yours to keep. You may subsequently cancel or change plans without returning or paying for the device.
Can I subscribe to Premium without receiving an XMD?
Yes. Customers who choose Premium without an XMD are not subject to the XMD return requirement or XMD-related minimum commitment.
What happens if one of my payments fails?
Only successfully paid Premium billing periods count toward completion of the six-payment commitment.
What does XertyFi assess?
XertyFi performs an external, non-intrusive assessment of your publicly visible digital exposure — including SSL/TLS, DNS, security headers, exposed services, email-domain protection, and known vulnerability indicators.
Do I need to install software?
No. The initial assessment is entirely external. No software installation, credentials, or agents are required.
Is this a penetration test?
No. XertyFi performs non-intrusive external analysis. It does not include active exploitation, credential attacks, or destructive testing. A separate authorized service would be needed for a formal penetration test.
Does XertyFi certify HIPAA compliance?
No. XertyFi can help identify cybersecurity risk indicators and support remediation planning, but it does not issue HIPAA certification, PCI-DSS certification, SOC 2 certification, or legal compliance determinations.
Can I assess a website I do not own?
No. You must own the domain or have explicit authorization from the owner to request an assessment.
What does the security score mean?
The security score (0–100) reflects your external risk posture. A higher score indicates fewer identified exposures. It is a point-in-time snapshot, not a guarantee of security.
Can I upgrade after my initial assessment?
Yes. You can upgrade to a higher-tier plan at any time from your dashboard.
Do you offer team access?
Yes. Organization owners can invite team members with configurable roles and permissions.
What payment methods do you accept?
We accept major credit/debit cards through Stripe.