Recon that finishes
before your coffee does.
TLS, HTTP headers, email authentication, subdomain discovery and look-alike domains — graded, exportable, and runnable on a target you do not own, because every one of them reads public records and connects to nothing. A coverage account tells you what the sweep could not reach, so you know where your own manual work starts.
Free starter credits, no card, no subscription. Want to see a real report first? Ask us for a sample.
Why this fits
Exports that feed your tooling
Look-alike findings download as a STIX 2.1 bundle or as YARA rules, for the whole scan or one domain at a time, in the shape you want — the name, its URLs or its addresses. Built when you ask rather than stored, so a download is always the report as it stands.
A coverage account, not a clean bill
Every sweeping check reports what it found, what it confirmed absent, what went unanswered and what it never reached. “Nothing found” with no denominator is the failure mode that wastes an afternoon; here the denominator is in the report.
Pay for the scan, not a seat
No subscription and no minimum. A one-off recon on a new programme costs a few credits, and a scan that fails or has nothing to test is refunded.
What you can point at anything
Everything above reads public DNS, public certificate logs and the target’s own published records, so it runs on a target you do not own. The checks that touch a host — the port scan, the live spoofing test, the breach lookup — need the asset proven yours first, so they are for your own estate rather than a programme’s. Worth knowing before you spend a credit expecting otherwise.
See a real report before you sign up
Ask and we will send a full sample report, so you can see the evidence layer and the coverage figures before spending a credit.
Ask for a sample reportOr create an account and run one on your own domain — the starter credits cover it.