Old websites and test pages
Staging sites (copies of your website used for testing), campaign pages, and pages from a previous brand often stay live after your team moves on. Many run old software with known flaws.
Free – no credit card required
The parts of your business you forgot were online
The website from before your rebrand. A test page a developer never took down. A booking tool someone signed up for in 2021.
They're still online, and many still run software nobody has updated in years.
We'll show you what's still out there and what to fix first. It's completely free.
Get a complete map of your attack surface for free with HackRisk.
Where forgotten assets hide
Tools signed up for outside IT
When teams sign up for cloud tools without telling IT, those accounts sit outside your security checks. Security teams call this shadow IT.
Systems that miss updates
Your team can only patch the systems it knows about. Exploited vulnerabilities – known flaws attackers use to break in – caused 18% of ransomware attacks in Sophos's State of Ransomware 2026 report.
What your free report shows you
Assets you forgot about
Recon Scan maps the websites, subdomains, and servers linked to your domain that anyone can see from the internet.
Weak spots on your systems
Vulnerability Scan checks your internet-facing systems for known flaws and ranks them by severity.
Leaked logins
Dark Web Scan looks for staff email addresses and passwords from your domain that have turned up in data breaches.
What attackers can learn about you
Domain registration details, hosting providers, and the software behind your sites. Attackers gather this information before they plan an attack.
Your HackRisk Score
One number that sums up your external risk, graded A* to F. Share it with clients, insurers, or your board.
What to fix first
Plain-English fix advice, ordered by risk, so your team can close the most serious gaps first.
Claim your free HackRisk Report
See what's still online under your business's name and how much risk it carries.
When you want ongoing monitoring, you can upgrade from inside the portal.
Get Your Free Report
No credit card required
How it works
1. Tell us your domain
Fill in the form with your work email and company details.
We scan from the outside, the same way an attacker would, so you have nothing to install.
No software, no agents, no IT involvement required.
2. We run the scans
We run our Recon Scan, Vulnerability Scan, and Dark Web Scan against your domain.
We check for vulnerabilities, exposed credentials, and map every asset visible from the internet.
If it's there, HackRisk will find it.
3. Read your report
Your report arrives within 24 hours, with your HackRisk Score and you get 30 days of portal access to explore the results.
You'll see every breached credential by individual, risk scores, and a prioritised fix list.
HackRisk subscribers get continuous monitoring and daily updates.
Frequently Asked Questions
What counts as a forgotten asset?
Anything linked to your business that's still reachable online but no longer on anyone's radar. Common examples include old websites, test environments, unused subdomains, expired SSL certificates (the padlock that secures a website), and login pages for tools you stopped using.
An affordable, lightweight solution to keep your environment secure between rounds of penetration testing.
A combination of some of our most powerful security tools, HackRisk provides you with all the information you need to act decisively and secure your environment.
This unique bundle provides unrivalled visibility across your entire attack surface; identifying weaknesses in your environment, discovering hidden and unmanaged assets, and understanding how much of your information is already in the hands of bad actors.
HackRisk scans your systems, internal and external, as well as the wider internet, to produce your Hack Risk Report.
You’ll see a HackRisk Score for each of the constituent services, and an overall risk score to show your current threat level.
Do I need to install anything?
No. We only need your company domain. Our scans run from the public internet, so your IT team has nothing to set up.
Your overall score accounts for the findings of the three separate services within Hack Risk.
It accounts for the highest level of risk identified overall, and how vulnerable that would leave your systems to a threat actor.
This score should be used to track your progress as you reduce risks across your environment.
What's in the free report?
Your HackRisk Score, plus the top five findings from our Recon Scan, Vulnerability Scan, and Dark Web Scan. Each finding comes with advice on how to fix it. If you add suppliers in the portal, you'll also see Supply Chain Risk findings.
The expert resolution advice within the platform helps you to resolve vulnerabilities and data breaches, and provides best practice to avoid cyber incidents.
How is my HackRisk Score worked out?
We combine the results from each active scan into one risk percentage and a grade from A* to F. Your weakest area carries the most weight.
Exposed web assets, including admin panels, subdomains, login pages, expired certificates, open databases, APIs, are mapped to help you visualise your attack surface.
What if you find something we didn't know about?
That's what the report is for. Each finding includes guidance on how to secure or retire the asset. Subscribers get ongoing scanning as their business adds and drops systems.
What happens after the free report?
You can explore your findings in the portal for 30 days. HackRisk Core starts at £49.99/month, billed annually, and subscribers can access up to 10% savings on cyber insurance.
Find the parts of your business you forgot were online
Get your free HackRisk Report within 24 hours. It's completely free.
Find my forgotten assets