What you get
- Subdomain and public asset discovery.
- TLS, header, redirect, and exposed service observations.
- Browser-rendered crawl signals for modern apps.
- Recommended next step: no paid audit, Deep DAST, AI + Infra, or Monitoring.
Surface Recon is the free entry point. It maps visible domains, routes, exposed services, browser-loaded assets, and configuration signals before you decide whether deeper testing is warranted.
Useful when you want a lightweight view of public exposure before paying for active testing.
Free Surface Recon avoids credentialed tests, destructive checks, active exploitation, and broad vulnerability claims.
If your public surface includes a chatbot, Continuous Monitoring can watch canaries, truth facts, drift, and availability after launch.
Explore monitoring