Scanning
See what an attacker sees. Then keep looking.
We map and test everything you let us see: domains, mail, websites, apps and, if you want, your code and cloud. Not a one-off PDF, but a scan that keeps running and tells you when something changes.
- Starts with
- Your domain name
- Access needed
- None to begin
- First results
- Within days
- Cadence
- Continuous
Why it matters
Most breaches start with something nobody knew was public.
A forgotten test site, an admin page that was meant to be internal, a mail record that lets anyone send as your CEO. None of these are exotic. They are simply things that slipped out of view while the business kept moving.
Scanning puts them back in view. We start from the outside with nothing but your domain, exactly like an attacker would, and build a map of what is reachable: subdomains, web apps, mail setup, certificates, exposed services and the software versions behind them.
When you give us more access, the scan goes deeper. Accounts let us test what happens after login. Read access to your code or cloud lets us find problems before they ever reach production. Depth always follows the access you choose to give.
Scope
What we look at
- 01Domains & DNSSubdomains, dangling records, zone hygiene, DNSSEC and registrar settings.
- 02MailSPF, DKIM and DMARC, spoofing exposure and look-alike domains.
- 03Web & appsExposed admin routes, outdated CMS plugins, security headers and common web flaws.
- 04TLS & certificatesLegacy protocols, weak ciphers and certificates about to expire.
- 05Exposed servicesOpen ports, remote access, databases and dashboards that should not be public.
- 06Code (optional)Dependencies with known vulnerabilities, secrets in repositories, risky patterns.
- 07Cloud (optional)Public buckets, over-broad roles and misconfigured network rules.
How an engagement runs
From first call to lasting result.
- 1Signed scope
Agree the scope
You tell us which domains and systems are yours and what we may test. We put it in writing so everyone knows what is in and out of bounds.
- 2Asset inventory
Map the surface
We discover everything reachable from the internet and check it against the scope. Surprises are common, and they are usually the most useful part.
- 3Verified findings
Test and verify
Automated checks run first, then a specialist verifies what matters so you do not get a pile of false positives.
- 4Live console + weekly report
Keep watching
The scan keeps running. New subdomains, expiring certificates and new vulnerabilities in your software show up in your console as they happen.
What you get
What lands in your console
Illustrative example. Your own results appear in your console and in a weekly report you can forward as is.
mapInventory of every domain, host and service we foundhighAdmin route publicly reachable: impact, proof and fixmedDMARC policy set to none: step-by-step move to rejectlowTLS 1.0 still enabled on the shop: config change attacheddiffWhat changed since last week, and who should look at itHow we work
Rules we don't bend.
Outside in first.
Black-box checks of everything public, with no access needed.
Depth follows access.
Accounts, code and infrastructure unlock deeper checks, only when you say so.
Explained, not dumped.
Every finding comes with impact, evidence and a fix in plain language.
Nothing destructive.
Scans are tuned to stay safe for production systems.
A good fit when
- You are not sure what is publicly reachable any more
- Several agencies or developers have built things under your domain
- You want a baseline before a bigger red team exercise
Not the right start when
- You need a formal certification audit (we can prepare you for one)
Do you need access to our systems?
Not to start. The first scan only uses what is public. Extra access is optional and makes the results deeper.
Will scanning slow down or break our site?
Scans are rate-limited and avoid destructive tests. If a system is fragile, tell us and we schedule or exclude it.
How is this different from a free online scanner?
Free scanners check one thing once. We map your whole surface, verify findings by hand, explain the fix and keep watching for changes.
We have no developers. Is this still useful?
Yes. Many fixes are settings at your mail, DNS or hosting provider, and we write them out step by step.
More of what we do
Secure smarter.
Know where you stand.
Run the free domain scan now, or talk to us about a full outside-in look.