free, no card required

See what's publicly exposed on your domain.

A free baseline scan - subdomains, DNS, ports, TLS, web services - then daily monitoring with alerts included, free, no card required, for as long as you want it.

Step 1 of 2

Next: prove you control the domain (DNS record, file, or meta tag - about 2 minutes). No card required - you'll create a free account afterward to see the results.

Two steps: prove you control the domain (a DNS record, a file, or a meta tag - about 2 minutes, whichever fits your setup), then create a free account to see what we find. We require this because we only scan domains you actually control - not anyone's infrastructure on request.

Example SurfaceDiff finding: a service fingerprint change showing what was running before and after, side by side

Example finding - not a live scan of your domain