Step 1
Discover
Map the external attack surface: domains, subdomains, IPs, ports, ASNs and live internet-facing services.
Expose your attack surface
before attackers do.
A 4-step exposure method.
Built by a hacker from years of field experience, shaped into an accessible platform for anyone who needs to understand their external exposure.
Step 2
Detect
Identify exposed services, certificate issues, weak headers, CVEs and breached credentials tied to the target.
Step 3
Monitor
Keep the same dataset navigable across landscape, maps, certificates and graph views as new evidence appears.
Step 4
Alert
Surface high-signal findings quickly, so critical exposures are easy to spot without digging through raw output.
One platform.
All your data.
AssetsSubdomains, IPs, ASNs, hostnames and ports.
ExposureOpen services, banners, certs and web posture.
RiskCVEs, weak TLS, headers and breached credentials.
ContextMaps, certificates and holistic graph relationships.
Platform capabilities
Automated, on every scan — no manual setup required.
Passive Enumeration
Subdomain and host discovery from third-party indexes and DNS — no packets touch the target until you ask for an active scan.
CVE Vulns
Known CVEs matched passively against fingerprinted services — surfaced from the same discovery pass, before any active probing.
CVE Finder
Active scanning across every live host — open ports, running services and known CVEs (critical & high severity) — so you know what's actually exploitable, not just what's exposed.
Certificate & TLS Posture
Full chain validation on every host: expiry, trust, hostname match, weak keys and legacy TLS versions, flagged automatically.
Anti-Phishing Detection
Homoglyph and look-alike domain generation with live registration checks, so impersonation attempts surface before they're used against you.
Breach & Credential Exposure
Compromised credentials tied to your employees, third parties and customers, tracked across known breach data.
24/7 Monitoring
Continuous watch over your external exposure between scans, so nothing new goes unnoticed.
Takedown
Rapid removal of malicious look-alike domains and phishing infrastructure once detected.
Deep & Dark Web Monitor
Ongoing visibility into forums, marketplaces and leak channels where your data and brand get discussed before it reaches the surface web.
Databreach intelligence
Credential-leak coverage built from large-scale indexed breach sources.
Daily Leaked Credential Analysis
Searches are checked against a massive credential-leak corpus so exposed employees, third parties and customers can be surfaced quickly.
Continuously Indexed Leak Files
Indexed breach files, stealer logs, combolists and dark-web dumps provide context on where credential exposure appears.
Continuous Credential Ingestion
New credential intelligence is continuously ingested and analyzed to surface emerging exposure.
Choose the plan that fits
Start with passive visibility, add continuous monitoring, or activate deeper enterprise testing.
Starter
$67
one-time payment
A passive scan for one domain and all discovered subdomains. Nothing touches your infrastructure.
- check1 domain and up to 50 subdomains
- checkGeolocation map of discovered targets
- checkPassive subdomain & host enumeration
- checkPassive port & service discovery
- checkCertificate & TLS check
- checkPhishing domain monitoring (1 one-shot scan)
- checkData breach & credential check
- checkData leak monitoring with obfuscated passwords (first 2 characters visible)
- checkAI Report
- check30-day access to scan results
- closeNo takedowns included
Advanced
$339
per month
Passive scanning plus weekly monitoring for one domain and all discovered subdomains.
- check1 domain and up to 150 subdomains
- checkGeolocation map of discovered targets
- checkPassive subdomain & host enumeration
- checkPassive port & service discovery
- checkPhishing domain monitoring (weekly scan)
- checkWeekly port & service monitoring
- checkWeekly certificate & TLS monitoring
- checkWeekly passive CVE monitoring
- checkWeekly data breach monitoring
- checkData leak monitoring with obfuscated passwords (first 2 characters visible)
- checkMonthly AI Report
- checkRemediation guidance
- check1 takedown
- check90-day access to scan results
Enterprise
$6,240
per year
Full passive and active exposure testing, with daily data breach monitoring.
- check1 domain and up to 500 subdomains
- checkGeolocation map of discovered targets
- checkActive subdomain & host enumeration
- checkActive port & service discovery
- checkIP Reputation Checking (Twice-weekly)
- checkDomain Reputation Checking (Twice-weekly)
- checkPhishing domain monitoring — 2 scans per week
- checkTwice-weekly active scanning
- checkTwice-weekly port & service monitoring
- checkTwice-weekly certificate & TLS monitoring
- checkTwice a week Active CVE checking
- checkDaily data breach monitoring
- checkData leak monitoring with cleartext password exposure
- checkCustom executive report
- checkRemediation guidance
- check48 takedowns per year
- check1 year access to scan results
Prices in USD. Stripe can display and charge a supported local currency at checkout.
Additional services
Beyond the automated platform.
Manual Penetration Testing
Hands-on testing from a human operator — for the attack paths automated scanning can't reach on its own.