TrustSek as a SafeState alternative
SafeState offers a suite of security tools that partners sell under their own brand. TrustSek gives one domain an outside-in risk score. This page sets out how the approaches differ, from public sources.
Last reviewed
SafeState is a cybersecurity platform sold through partners.
As described on its website on 27 September 2026, SafeState is “a listed cybersecurity platform” for consumers and SMBs, reached “through a global network of partners in hosting, telecoms and insurance”. Its home page offers partners “cybersecurity under your brand”, and describes the delivery as “One platform. White-labeled or via API.” The company is headquartered in Stockholm, and its site states that SafeState (publ) is listed in Stockholm under the ticker STATE.
Its product suite includes dark web monitoring, blacklist monitoring, a website vulnerability scanner, phishing simulation, incident response, cyber support, a password manager, a VPN, a privacy toolbox and cyber insurance. The dark web monitor “continuously” monitors “the public web, deep web, and dark web to detect exposed sensitive information linked to businesses” and alerts users when data is found. Blacklist monitoring scans domains and associated IPs “daily against industry-recognised blacklists”. The vulnerability scanner scans “continuously against CVE and CWE” and explains each vulnerability “with severity ratings and step-by-step fix guidance”.
The pages we cite do not describe a single security rating or score for an organisation. SafeState and TrustSek therefore do different jobs, and they overlap only in parts.
TrustSek reads one domain against a fixed baseline.
TrustSek scores an organisation from the outside in. You give it a domain; it collects public evidence and returns a score with every finding explained. There is nothing to install and no access to your systems.
The number is a multiplier on a baseline. The scoring policy starts from a 2% chance that an average organisation has a cyber incident in a year; 1.0× is where a domain with no findings lands, and 3.0× means roughly three times as likely. The score falls into one of four bands.
Six modules make up the score, each with a published weight:
| Module | Weight | What it looks at |
|---|---|---|
| Email securitySPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA, DNSSEC and nameserver redundancy. | 20% | SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA, DNSSEC and nameserver redundancy. |
| TLS and web hygieneWhether HTTPS is served, certificates, protocol versions and ciphers, redirects, security headers and cookie flags. | 20% | Whether HTTPS is served, certificates, protocol versions and ciphers, redirects, security headers and cookie flags. |
| Ransomware exposureClaims naming the organisation on ransomware leak sites, from two independent trackers. | 20% | Claims naming the organisation on ransomware leak sites, from two independent trackers. |
| ReputationThe domain and its addresses on threat-intel, malware, phishing and botnet lists. | 15% | The domain and its addresses on threat-intel, malware, phishing and botnet lists. |
| VulnerabilitiesAdvertised software versions matched against known-exploited and published vulnerabilities. | 15% | Advertised software versions matched against known-exploited and published vulnerabilities. |
| Attack surfaceSubdomains, high-risk hostnames, open non-web ports, domain age and lookalike domains. | 10% | Subdomains, high-risk hostnames, open non-web ports, domain age and lookalike domains. |
Every finding says what was tested, why it matters, what the impact is and how to fix it. When a source could not be asked or failed, the scan shows it as not checked instead of counting it as clean. The methodology has the full calculation. TrustSek is built for Sweden and the Nordics. The site and the methodology are in Swedish and English; findings in the app are reported in English.
The approaches side by side.
The SafeState column contains only what its website stated on 27 September 2026. Where it did not say, we do not guess.
| TrustSek | SafeState | |
|---|---|---|
| What it is | An outside-in cyber risk score for one domain | A suite of security tools for consumers and SMBs, offered white-labelled or via API through partners |
| What the score looks like | A multiplier on a 2% annual baseline, in four bands | Not stated in the sources cited |
| Where the evidence comes from | Public sources, plus one TLS handshake and two web requests to the domain; non-intrusive, no port scans | The public web, deep web and dark web for exposed data; blacklists for domains and IPs; website scans against CVE and CWE |
| Leaked credentials | Not included; TrustSek has no breach or leaked-credential data | Dark web monitoring for “leaked credentials and company data” |
| How often it runs | When you run a scan, in about 30 seconds; no monitoring between scans | Dark web monitoring described as continuous; blacklist scans daily; vulnerability scanning described as continuous |
| Alerts | None; TrustSek does not send alerts | Alerts when data linked to a customer's domain is found; email alerts when a domain hits a blacklist |
| How findings are explained | What was tested, why it matters, the impact and the fix | Vulnerabilities explained “with severity ratings and step-by-step fix guidance” |
| What else is offered | Supplier tracking, portfolio views, PDF reports, a REST API | Phishing simulation, incident response, cyber support, password manager, VPN, privacy toolbox, cyber insurance |
| Language and market | Built for Sweden and the Nordics; site and methodology in Swedish and English, findings in English | Headquartered and listed in Stockholm; sold through partners in hosting, telecoms and insurance |
When TrustSek may fit.
- You want one number for a domain's outside-in cyber risk, read against a fixed baseline, with weights you can look up.
- You want every finding explained with a fix, and to see which sources were not checked before you rely on the number.
- You work in Sweden or the Nordics and want the method explained in Swedish as well as English.
- You are an IT partner or a company that needs a clear outside-in starting point for a client, a supplier or your own domain.
When SafeState may fit better.
- You need dark web monitoring for leaked credentials and company data. TrustSek does not include breach or leaked-credential data.
- You want monitoring with alerts, such as daily blacklist checks or continuous website vulnerability scans. TrustSek is a scan you run; it does not watch domains between scans or send alerts.
- You are a hosting provider, telecom operator or insurer and want to offer security tools to your own customers under your own brand, white-labelled or via API.
- You want end-user tools in the same package, such as phishing simulation, a password manager, a VPN or cyber insurance.
About this comparison
SafeState is a trademark of its owner, and TrustSek is not affiliated with SafeState. Everything said about SafeState here comes from the public pages listed as sources, as they read on 27 September 2026. We make no claim about its accuracy, prices, customers or quality. If something is out of date, tell us at sales@trustsek.com and we will correct it. Other comparisons are on the compare page.
See how your domain scores
Free, from public evidence. Every finding comes with the reason and the fix.