You have more on the internet than you think.

Type your domain. In about a minute we will show you the subdomains, mail records and web settings the outside world can already see — and which of them a stranger could use against you.

No signup required · First findings in about a minute
perimeter — northwind.com
SEEDS
4 verified
FOUND
1,284
IN SCOPE
1,102
OPEN
17

Fix — the four that matter most

Anyone can send email as northwind.com
No DMARC policy · 6 days open
A certificate expires in 4 days
shop.northwind.com · Retail Eng
64 assets are not being checked
2 seeds need verifying
9 new assets await your decision
From last night's discovery run

Illustrative — not a live account.

Four things happen, in this order, forever.

01

You tell us a domain

You confirm you own it or are authorised to scan it. Nothing runs until you do — that is the difference between a security tool and a stranger scanning you.

02

We find what is attached to it

Certificate logs, DNS, IP registries. Obvious matches are added; the uncertain ones we bring to you rather than guess.

03

We check it, every day

Email spoofing, TLS, browser protections, known vulnerable versions. Passive by default — nothing intrusive runs unless you ask for it.

04

You get told when it changes

A new subdomain, an expiring certificate, a check that used to pass. Assign it, fix it, and we confirm the fix worked.

What it does that a one-off scan can't.

It keeps a register you can defend in an audit

Every issue has a severity, an owner, a due date and a history of who did what. Accepted risks are recorded with a justification. Export it as a PDF your board or your auditor will accept.

Missing DMARC policyJonas D.due 2d
Certificate expiringRetail Engdue 4d
Weak cipher suiteacceptedsigned off

It notices what appeared overnight

A marketing subdomain someone spun up on Friday is in your inventory by Saturday, and checked by Sunday.

It works across subsidiaries

One workspace, one score per company, and roles scoped so a subsidiary's team only sees its own estate.

It tells you if a fix actually worked

Recheck a single finding on demand; if it is gone, we close it and record why.

Pricing

Plain tiers, priced for what each one does.

Monitor
€63/ mo

See everything you expose, and know the moment it changes.

Continuous external asset discovery
DNS, TLS, email and header checks
Full findings with remediation guidance
Alerts when something changes
Manage
€159/ mo

Give findings owners, deadlines and proof of progress.

Everything in Monitor
SLA policies and breach tracking
Assign findings to remediators
Risk register and risk acceptance
Branded PDF reports
Govern
€359/ mo

For groups with subsidiaries, SSO and cloud estate.

Everything in Manage
Single sign-on (OIDC)
AWS, GCP and Microsoft asset import
Subsidiary hierarchy and group reporting

Free trial on every plan

Start with your own domain. It takes a minute.

No signup required · First findings in about a minute