Bring the receipts.
Every vendor in your stack is taking something. Blackout OS shows you what, priced in dollars, with the receipt attached.
▸ Vendor
6sense
ABM · INTENT DATA · DEANON
▸ Observed
Visitor identity exfil pre-consent. Account fingerprints transmitted to b.6sc.co.
▸ Annualized revenue at risk
$130K – $175K
1.8× contract value · range reflects confidence band
Watch what your vendors actually do.
Three consent states. Pre-consent. Post-consent. Post-rejection. Most vendors don't change behavior between any of them. That's the receipt.
Every vendor in your stack is already profiled.
▸ Vendor profile · live in product
6sense
ABM · INTENT DATA · DEANON
Sites observed
247
Evidence rows
18,402
First seen
2024-Q3
BTI flags
3
▸ Claims vs runtime
▸ Behavioral threat indicators
Over 601+ vendors profiled
Every vendor in your stack is already in the BLACKOUT VIDB. Updated every scan.
Browse the VIDB →Not a risk score. A dollar figure.
▸ After confidence + competitive caps
$130K – $175K
of revenue at risk annually
Range reflects the methodology's honesty discount. Competitive Exposure Factor capped at 60%. Exfiltration Confidence weighted per data class.
▸ Worked example: $40M ARR B2B SaaS, 50K monthly visitors, 6sense at $85K/yr. Customer values vary; every input is overridable in product.
Four ways your vendors take revenue. Every line, every quarter.
You fund your competitor's targeting.
The vendor pools your CRM signal with your competitors'. Both of you then buy the graph back. Every dollar you spend strengthens the auction that's bid against you.
▸ Evidence
visitor identity exfil pre-consent · OAuth scope on CRM · vendor customer overlap with competitors
$130K – $175K /yr per major vendor
Your forecast is built on signal you can't trust.
Vendor scripts manufacture identity events your analytics ingests as real. The same vendors take credit for the pipeline they helped fabricate. CAC, channel mix, and forecast all read off corrupted data.
▸ Evidence
third-party fingerprinting events · circular attribution loops · same-vendor input/output paths
8 – 22% of demand-gen budget at risk
They know your pipeline before your renewal call.
A vendor with CRM access sees your deal velocity, growth trajectory, and competitive losses. Their AE walks into renewal with that intelligence. Yours doesn't.
▸ Evidence
OAuth scopes granted vs. documented product need · API pull frequency on deal records
15 – 25% renewal premium, every contract year
Your deals are someone else's market data.
When deal stages, values, and close dates leave your CRM, they don't disappear. They surface as someone's buying signal, competitive intelligence, or deal flow. Your active opportunities become the trade.
▸ Evidence
deals.read / pipeline.read OAuth scope · undisclosed subprocessor relationships
The finding is the number
One vendor. Four lines. Every quarter.
▸ Methodology — four tracksMonitor. Analyze. Enforce.
Default mode. Every browser-side request, every payload, priced live.
Agents read the stream. Math, impact, and security write-up done.
One click per vendor. Reversible per policy. Verify in monitor mode before enforce.
Stop the leak. Keep the vendor.
You set the policy. We enforce it at the boundary.
▸ Reversible per-vendor · No code changes · No CDN swap
One reaches out. One listens.
Vendor
6sense
What's this costing you?
$130K–$175K in annualized revenue at risk. Pipeline data pooled into a shared graph 340 companies query. Range reflects confidence band per the methodology.
Will your tools still work?
Enforcement strips visitor identity exfil but preserves the ABM scoring API your team uses. No measurable workflow impact.
What do you tell your CISO?
3 BTI categories triggered, HAR evidence captured, pre-consent firing confirmed across 3-pass scan. One-click export.
Reads every scan. Does the math. Puts the recommendation on your desk before you ask.
▸ Try asking
- “What changed since last week?”drift report
- “Show me the evidence for 6sense.”vendor file
- “If I enforce RB2B, what breaks?”impact analysis
- “Which vendors aren't in our DPA?”contract gap
- “Export the security advisory for HubSpot.”CISO handoff
When you have a question. Answers cite scan IDs, evidence rows, and contract clauses. Not the model's training set.
One click. Two languages.
Finding · 6sense
$130K – $175K
Annualized at risk · 1.8× contract value
- Pooled with 340 companies in shared intent graph.
- Recommendation: enforce. No functional impact.
- ABM scoring API keeps working as-is.
one click
~2 sec
one click
Subject · Security advisory
BLACKOUT // Vendor: 6sense // 3 IOC matches
- 12 undisclosed outbound endpoints.
- Pre-consent identity exfil confirmed (HAR attached).
- BTI: B-04 / B-07 / B-12.
- Chain of custody: SHA-256 hashed, court-ready.
You don't need to translate it. It arrives translated.
Bring the receipts.
Enter your domain. Your first receipt is 60 seconds away.
▸ Free · No signup · No credit card · 600+ vendor signatures