Type a domain
One root domain is enough — we discover the rest ourselves. No verification needed for a passive scan.
Takes 5 secondsFree · no signup · no agent
What can the internet already see about you?
Type your domain. In about two minutes we map every subdomain, IP, open port and outdated product we can find from outside — then tell you, in plain English, which three things to fix first.
Domain to scan
2 minaverage scan time41k+domains mapped0packets that touch you
How it works
Three steps, no setup
We map from outside
DNS, certificate logs, WHOIS and banners are stitched into a single picture of your perimeter.
Runs in ~2 minutesRead the short version
You get a ranked list of what to fix first, each item explained in plain English with an effort estimate.
Shareable link, no loginCoverage
What the scan covers
Four passes over your public footprint — each one written up in language you can forward to a non-engineer.
Subdomain discovery
Forgotten hostnames, shadow IT and stale staging edges that attackers still probe every week.
staging. · old-blog. · vpn.Open port mapping
Every internet-facing TCP service, with a straight answer on whether it should be public at all.
3306 MySQL → should never be openTechnology fingerprinting
Web servers, frameworks, CDNs and versions read from public banners and response headers.
nginx 1.18.0 · PHP 7.4 (EOL)Vulnerability matching
Discovered products cross-referenced against known CVEs, then ranked by real-world exploitability.
CVE-2024-4577 · exploited in the wildQuestions
Answers before you type a domain
Still unsure? A security engineer will walk your results with you — free, no pitch.
Book 20 minutes →EASM continuously maps what the internet can see of your organization — domains, subdomains, IPs, open ports and the products running on them. In the Trusteed workspace that map is the scope of research: a hypothesis, a test, and evidence of impact come after the host is visible.
One scan tells you where you stand. Monitoring tells you when it changes
Free plan keeps watching one domain, alerts you on new hosts and ports, and filters the noise so you only hear about what matters.