What is Cybersecurity Forefront?

Cybersecurity Forefront is a chat-first firewall configurator and Client IPAM for MSPs and in-house security teams, plus a suite of free compliance and network tools. We're a US LLC (Wyoming) operated by senior network and security engineers.

What is the chat-first firewall configurator?

Our flagship product (codename ZeroConf ZTP). You describe the deployment — hardware, WAN, VLANs, policies — and the wizard generates a reviewable, diff-able config you can ship to a Fortinet, WatchGuard, Zyxel, or pfSense device.

Which firewall vendors do you support?

Fortinet (FortiGate), WatchGuard (Firebox), Zyxel (USG / ATP), and pfSense. We add vendors based on customer demand — Cisco ASA, Juniper SRX, and SonicWall are on the shortlist.

What is included in the free plan?

The concierge AI chat, the read-only ZeroConf demo, and the full free-tools suite: subnet calculator, DNS health, TLS inspector, security headers, password breach lookup, CVE lookup, and NIS2 assessment. No email gate, no quota gimmicks.

How does the Client IPAM work?

One workspace per client. Each client holds subnets (IPv4 + IPv6), hardware inventory, important IPs and credentials, and a history of generated firewall configs. Archived clients are kept for audit. Hard-deletion is on the user, not us.

Do you support NIS2 compliance?

Yes. The NIS2 Assessment is a free 25-question self-assessment with scoring, evidence list, and a downloadable PDF. A full NIS2 Isolation Planner that maps your IPAM into compliant segmentation zones is on the Q3 2026 roadmap.

Where is my data stored?

MongoDB Atlas in a US region, encrypted in transit (TLS 1.2+) and at rest. Passwords are bcrypt-hashed. We do not send your stored customer content (IPAM, configs, credentials) to model providers for training.

How is pricing structured?

Free forever for the concierge chat and the seven free tools. Pro at $19.90 per month for the full ZeroConf wizard, saved projects, and config history. MSP at $199 per year for unlimited tenants and priority support.

Do you offer support?

Pro: email support with one-business-day response. MSP: priority support with a four-hour response SLA. Free plan: best-effort community support. All plans get product-update emails and a public changelog.

How do I get started?

Open the concierge chat at the top of this page and ask anything — services, pricing, ZeroConf — or click any free tool to use it without an account. To save projects or run the full wizard, create a free account and upgrade when you're ready.

How does the AI co-pilot work?

The AI chat on the homepage uses GPT-4o-mini to understand plain English questions about networking. It picks the right tool, invokes it directly, and returns formatted results in the conversation — subnet maths, DNS audits, CVE lookups, and (for Pro accounts) live IPAM queries against your own hardware and CVE alerts. Network engineering at conversation speed.

Can I use this for my MSP managing multiple clients?

Yes. The Client Data Suite is multi-tenant — each client gets isolated data, you switch context via dashboard. Pro tier supports up to 10 clients (15 for Founding Members), MSP tier is unlimited. Global search lets you find any subnet, asset, or IP across all your clients in one keystroke.

What firewall vendors do you support in detail?

Today: Fortinet FortiGate (CLI + XML), WatchGuard Firebox (CLI), Zyxel USG/ATP (CLI), Netgate pfSense (XML import), and a generic CLI fallback. 37 hardware models pre-cataloged. We add vendors based on user demand — Cisco ASA, Juniper SRX, and SonicWall are next.

How do you compare to Auvik or NetBox?

Auvik is a real-time monitoring and topology platform — we don't compete there. NetBox is a powerful source-of-truth IPAM, but heavy to self-host and expensive in cloud form. We sit between them: lightweight IPAM you can use in 60 seconds, plus a multi-vendor firewall configurator that neither Auvik nor NetBox offers. See the comparison table above.

What's your data residency policy?

Data is hosted on US infrastructure. We are GDPR-aligned for EU users via Standard Contractual Clauses and CCPA-compliant for California users. You can export or delete your data anytime by emailing info@cybersecurityforefront.com or from account settings.

New · Free 1 scan / day

Public Surface Audit

Discover what attackers see about your company. Subdomains, certificates, exposed services — all from public sources. No agent. No setup.

Example output · example.com

What you'll see after a scan

/100

high risk

Subdomains discovered

via Certificate Transparency logs (crt.sh)

Currently resolving

4 / 5

live A/AAAA records — likely intentional exposure

Findings

Found 3 subdomains with risky tokens [dev(1), staging(1), vpn(1)] — review for exposed dev/admin surfaces.
4 subdomains currently resolve to live IPs — confirm each is intentional.

Subdomains

Sorted by most recent certificate

Subdomain	First seen	IPs	Issuer
www.example.com	2024-01-12	93.184.216.34	DigiCert TLS RSA SHA256
api.example.com	2023-09-08	93.184.216.35	Let's Encrypt R3
dev.example.com	2024-02-01	93.184.216.36	Let's Encrypt R3
staging.example.com	2024-06-04	doesn't resolve	Let's Encrypt R3
vpn.example.com	2025-01-08	93.184.216.37	DigiCert TLS RSA SHA256

This MVP scan uses Certificate Transparency only.

Upgrade to Pro for Shodan port + service detection, HIBP breach search, and weekly delta alerts — or a one-time $4.99 scan (coming soon).

View Pro pricing