Questions, answered plainly.

Stedra is a digital continuity platform. It maps the accounts your business actually runs on — the domain, email, website, socials, payments, cloud and the tools around them — and tells you who really controls each one, so a departure, an agency breakup or a lapsed renewal can't quietly take you offline. Founders use it self-serve; IT firms and agencies use it white-labelled to run continuity reviews for their clients.

It's the core loop: discover what you run on from public records, interview to fill in what a scan can't see (who holds each login), score how exposed you are, open ranked fixes with step-by-step playbooks, and monitor for drift between reviews. A founder can do it self-serve in an afternoon; a partner runs it as a service line in about an hour of the client's time.

It reads public data only: your domain registration record (RDAP/WHOIS), DNS answers (nameservers, mail records, DNS provider), and your public homepage (to fingerprint the providers and tools you use and find the social profiles you link to). It runs in under a minute, needs no login, and never authenticates to anything.

No. There's nothing to install, and Stedra never asks for the passwords or logins of your other services. The scan uses public records; everything else comes from the plain-language interview and fields you fill in yourself.

A single 0–100 number that summarizes how much of your business you actually control. Critical exposures (a domain held by an agency, cloud root on a personal email) cost the most; unconfirmed items cost less; secured, documented assets cost nothing. It's designed to move as you fix things, so you can show progress between reviews.

Think of it as starting from a clean 100 and coming down for every gap we find. Each account lands in one of three states — secured, needs confirming, or critical — and a critical gap (something one person or an outside vendor controls that could take you offline) weighs far more heavily than an item that just needs confirming. Fully secured accounts don't count against you at all. Because the number is driven straight from the state of your register, not a survey or an opinion, it climbs the moment you close a risk or confirm who owns something — which is what makes progress between reviews visible. Roughly: a low score is a business exposed on several critical fronts; a high score is one where the important accounts are properly owned, backed up and documented.

A scan can see that you have an account; it can't see who holds the login. The interview fills exactly those gaps — one plain question per fact it still needs (who owns it, whether a second person can get in, whether renewal is safe) and nothing it can already answer from your register. Answering can set an asset's status and open a fix, so a few minutes of questions turns into a ranked to-do list.

Yes. The scan is a starting point, not the whole picture — add anything by hand from the Assets page (a SaaS tool, a payment account, a brand-file drive). Manually added assets go through the same scoring and interview flow as discovered ones.

Yes. Each client has a primary domain and can list additional domains — a .co redirect, regional TLDs, other brands you run on. Discovery and monitoring cover every domain listed, and findings merge into one register. Manage them from Assets → Domains.

Each risk Stedra opens comes with a step-by-step, no-downtime playbook for fixing it — transferring a domain out of an agency's account, adding a backup admin, recovering a social login from an ex-employee, and so on. They're written to be followed safely without breaking anything that's currently working.

Never. This is the design decision the whole product is built around: Stedra records ownership and recovery metadata — who holds an account, who the backup is, where recovery points — never the credentials themselves. There is no credential vault to breach, because there is no credential vault.

We keep your register (assets, people, risks, tasks) and the answers you give. You can export the asset register and people list as CSV and the full report as a branded PDF at any time. A business owner can delete their entire workspace from Settings → Team; deletion is permanent and cascades everything.

No. Your register is scoped to your firm and client at the data layer, and analytics on the site are first-party, cookieless counts with no third-party trackers. If a partner runs Stedra for you, your data lives in their workspace under their brand — and exports cleanly if you ever part ways.

No. Discovery is read-only and reads public records only — it can't log in, can't see inside any account, and changes nothing. Anything that modifies an account is a step in a playbook that you carry out yourself.

Yes — during beta the entire product is free: every feature, no card, no trial clock. The only thing we ask for is feedback.

No. Nothing is ever auto-charged. When paid plans arrive you'll get at least 30 days' notice and choose a plan explicitly, and beta members lock in early-adopter pricing.

It stays yours. You can export your register and reports (CSV/PDF) at any time, and we'll delete your workspace on request.

It lets MSPs, IT consultants and agencies deliver continuity reviews as a white-labelled service line. Your brand is on the console, the client portal and every report and email; the automated discovery and fix playbooks do the heavy lifting so you can turn a manual review into a short, repeatable engagement. It's free during beta.

Only if you want them to. Your branding covers the console, the client portal (at your own portal URL) and every report and email. The "Powered by Stedra" line is a per-firm setting you can turn off entirely.

You can take over the same register — nothing is re-entered. The reverse works too: if you and a client part ways, their data exports cleanly (CSV register and people list, PDF report).

Archive them from the Edit client panel: they leave your active console, stop being monitored and reported on, and their portal closes — but the register and exports are kept, so you can reactivate or hand it over later. A firm owner can also delete a client permanently, with a type-the-name confirmation.

There are three roles. Owners administer the firm (branding, team, billing). Consultants work across all the firm's clients but can't administer the firm. Client (portal) users see only their own business, under your brand. Every action is checked against the role at the data layer.

From Settings → Team you can invite firm staff (owner or consultant). From a client's workspace you can invite that client's own people to their portal. Invitations go out by email with a set-password link; you can deactivate anyone's access immediately when they leave.

A business owner can delete their whole workspace from Settings → Team — it permanently erases the register, people, history and users after a type-the-name confirmation. Partner workspaces hold several clients' data, so they're closed through support rather than self-deleted.

Use the "Forgot password" link on the sign-in page. You'll get a reset link by email; it's single-use and time-limited. If you signed in through a partner's branded portal, use that portal's sign-in page.