Agency Client Security & Privacy Portfolio
Automated weekly SSL, DNS/DMARC, exposed secret, and OAIC/GDPR tracker audits across all client domains.
| Client Domain | Grade & Score | SSL / TLS | DNS & DMARC | Privacy Trackers | Secrets Check | Auto-Schedule | Actions |
|---|
Instant Domain Security & Privacy Grader
This public-facing tool acts as your 24/7 automated salesperson. Agencies test a client domain for free, see immediate compliance gaps (unconsented tracking pixels, missing DMARC, or exposed `.env` keys), and subscribe to unlock automated weekly monitoring and white-labeled PDF reports.
southern-cross-logistics.com.au
Turn Lead Into Recurring Revenue
Add this domain to your agency portfolio and generate a branded client PDF audit in one click.
White-Label Report Studio
Agencies customize their branding once, and your platform emails this audit to their clients automatically every month.
outback4x4gear.com.au
Prepared for: Outback Touring & 4x4 Gear Pty Ltd
Automated Technical Control Verification
Path to Multi-Million Dollar ARR & Minimal Owner Hours
Adjust the subscriber sliders and pricing below to model how your SaaS scales. Because agencies charge their own clients $150–$300/month per domain for "Managed Security & Privacy Reporting," a $349/month agency subscription pays for itself with just two clients.
1. Active Agency Subscribers by Tier
Delegating edge-case tickets to a fractional support contractor keeps your personal involvement under 2–3 hrs/week.
2. Real-Time SaaS P&L Breakdown
Passwordless Agency Auth, JWT Session & Stripe Checkout Flow
Test the complete self-serve agency onboarding pipeline: passwordless Magic Link / OTP sign-in, JWT session & API key rotation, hosted Stripe Checkout with 10% Australian GST calculation, and real-time Stripe Webhook provisioning.
1. Agency Authentication & Magic Link
No forgotten passwords—agencies log in via 6-digit email OTP or Google SSO.
2. Hosted Stripe Checkout & Webhook Provisioning
Select a tier, simulate a customer checkout, or fire Stripe webhook events to see automatic quota updates.
Core Python Scanning Engine & FastAPI Billing Server
Copy or download the backend Python scripts below to run live network checks (SSL certificates, HTTP security headers, DNS SPF/DMARC records, exposed `.env` files, and third-party tracking scripts) and handle Stripe subscription webhooks automatically.
Step-by-Step Home PC Launch Guide (Plain English)
Check off each step below as you set up the business from your computer at home. You don't need to know how to write code—just download the files, paste your account keys, and let the cloud servers and Gemini handle the daily work.
Step 1: Save the 5 Project Files to a Folder on Your Desktop
Create a new folder on your Windows Desktop called VanguardSurface. Go to the Backend Python Code tab above, click each of the 5 file buttons, and click Download File into that folder.
Step 2: Install Python on Your PC (The Engine That Runs the Scanner)
Think of Python like Microsoft Word, except instead of opening documents, it runs automation scripts. Download the Windows installer from python.org/downloads/windows. Crucial tip: On the very first installer screen, tick the little box at the bottom that says "Add Python to PATH" before clicking Install.
Step 3: Test the Scanner on Your Home PC
Open your VanguardSurface folder, right-click inside the empty space, and click Open in Terminal (or Command Prompt). Copy and paste the command below and press Enter to install the helper tools and run your first live scan:
pip install -r requirements.txt PyJWT google-genai && python scanner_engine.py
Step 4: Put the Engine on a 24/7 Cloud Rent-a-Computer (Railway & Cloudflare)
So you can turn your home PC off when you sleep or go 4x4 touring, upload this dashboard file to Cloudflare Pages (free) and upload your 5 Python files to Railway.com (~A$10/month). Railway keeps your scanner running 24/7 in a data center.
Step 5: Plug In Your Stripe Australia Account (Your Digital Cash Register)
Create a Stripe Australia account using your ABN and bank details, create your 3 monthly subscription plans (A$149, A$349, A$799), and copy your Secret Key into Railway's settings box. Now, whenever an agency pays, Stripe deposits the money into your bank and unlocks their account automatically.
Step 6: Connect Google Gemini for Daily Background Checks
Grab a Gemini API key from Google AI Studio and paste it into Railway as GEMINI_API_KEY so gemini_ops_agent.py inspects your database every morning. Then tell Gemini right here in chat to run a recurring 8:00 AM daily check on your inbox so you only ever look at the business when something needs your approval.