Recon Scanning

See your attack surface through an attacker's eyes.

Start Your Free Trial View Pricing

hackrisk - threat-scanner

> SCANNING: example.com
> FOUND: 3 credential leaks
> ALERT: 1 critical finding
> STATUS: report generated
> NOTIFIED: [email protected]
> ▋

100%

external asset visibility

layers of exposure mapped

agents to install for external scanning

Everything you need

Automated external reconnaissance maps every asset you own on the public internet - including the ones you've forgotten about.

Subdomain enumeration

Discover every subdomain associated with your domain, including legacy and forgotten properties.

Open port detection

Identify all open ports on your external-facing infrastructure and flag unnecessary exposure.

Exposed service identification

Detect admin panels, databases, APIs, and other services that should not be publicly accessible.

DNS and hosting visibility

See the DNS records, nameservers and registrar behind your domain, along with the CDN and hosting providers your assets sit on.

SSL certificate monitoring

Track certificate expiry, detect mis-issued certificates, and identify weak configurations.

Shadow IT discovery

Uncover cloud services and assets spun up outside IT's knowledge before attackers find them first.

Change tracking

Every scan is compared against the last, so you can see exactly which subdomains and endpoints have appeared or disappeared since you last looked.

Asset screenshots

See what each discovered host actually serves. Forgotten admin panels and abandoned staging sites are obvious at a glance.

How it works

1
Enter your domain
Simply provide your primary domain. Recon scanning runs entirely from the outside, so there are no agents to install and no network changes to make.
2
We map every external-facing asset
Our scanner systematically enumerates subdomains, open ports, exposed services, and DNS records across your entire external footprint.
3
You get a prioritised remediation list
Findings are ranked by severity so your team knows exactly what to tackle first to reduce risk fastest.

Why HackRisk?

No lock-in unless you want it.

Take the rolling monthly plan and cancel any time, or commit for 12 months and pay less. Same service either way, both billed monthly - only the length of the commitment changes.

Instant setup.

Nothing to install to get started and no IT project. Add your domain and external scanning is running in minutes.

See your risk in 24 hours.

Get your free HackRisk Report within a day. No sales call needed first.

Startups to large enterprise.

One domain or many, add more as you grow. You only pay for your size.

Where do you sit?

F Critical

E High

D High

C Medium

B Medium