Use cases
One product, seen from your side of it.
Attack Surface Scan is the same product for everyone: it finds what your organization has on the internet, keeps watching it, tells you what to fix first, and produces the evidence your auditors, insurers and customers ask for. What differs is the problem that brings you here. Pick the page that sounds like your week.
No card required to start. Plans from $25/month, flat.
By role
Founders & CTOs
Security coverage before your first security hire, plus the dated report that answers the enterprise security questionnaire.
Read more →
IT & ops teams
Certificate renewals, unexpected changes and forgotten systems: watched continuously, with alerts where your team already works.
Read more →
Security teams
Attack surface management (discovery, exploitation-ranked findings, a change feed and an API) without the enterprise contract.
Read more →
MSPs & agencies
White-label the whole product: your logo on every report, client workspaces, per-client alert routing. One flat price across your book.
See the MSP plan →
By use case
Certificate expiry
Escalating expiry warnings across every system you have, including the certificates automatic renewal quietly stopped renewing.
Read more →
Certificate discovery
Every certificate issued for your domains, found within the quarter hour from public records, with unexpected ones queued for review.
Read more →
Subdomain takeover
Find forgotten subdomains, and the ones someone else could claim, before they are used against you.
Read more →
Compliance evidence
Evidence for SOC 2, ISO 27001, cyber insurance and customer questionnaires, produced as a side effect of monitoring.
Read more →
Lookalike domains
Domains registered to imitate yours, spotted from public records while they're still parked, before they reach an inbox.
Read more →
DMARC monitoring
Alerts when your DMARC email spoofing protection is removed or weakened, with the before and after side by side.
Read more →
Need the technical detail for an engineer or security reviewer? Every check, integration and data source is in the documentation.
Whichever page you came for, setup is the same.
Verify a domain and have your first report in minutes.
Start your 7-day trialNo card required to start. Cancel any time.