Exposed services
Remote desktop, file sharing, databases, Telnet and FTP, screen sharing and admin panels that shouldn't face the internet.
Free external attack surface scan
See your business the way attackers do.
We find every internet-facing system under your domain and check it for exposed remote desktop, open databases, expired or weak certificates, missing web protections and spoofable email. You get an A to F report in minutes.
- 1Your details
- 2Prove ownership
- 3Scan
- 4Report
Prove you own
Add this TXT record wherever you manage your DNS (for example GoDaddy, Porkbun, Cloudflare, Namecheap or Microsoft 365). It doesn't affect your website or email, and you can delete it once the scan has run.
- Type
TXT- Name / Host
Some providers want the full name instead:- Value / Content
- TTL
- Leave the default, or 5 minutes if you can choose
DNS changes usually show up within 5 to 15 minutes. You can close this page and come back: bookmark this link to continue where you left off.
Scanning
Ownership confirmed. Your scan is running; keep this page open or come back to this link later.
Your results
: grade
A copy has gone to SJSTechnet. You can now delete the TXT record. Your report link works for 30 days.
Want these fixed?
We close exposed services, fix certificates and email records and patch what's out of date, for a fixed price quoted up front. Then we rescan to prove it.
Talk to usSomething went wrong
Start againHow it works
Four steps, about fifteen minutes
- 1
Tell us who you are
Your contact details and the domain to scan.
- 2
Prove ownership
Add one TXT record to your DNS. We never scan a domain until its owner proves control of it.
- 3
We scan
From our server in the United States, using only what anyone on the internet can reach.
- 4
Read your report
A graded summary on screen and a full PDF, with the most important fixes first.
What we check
The things attackers look for first
Certificates and encryption
Expired, expiring, untrusted or mismatched certificates, and outdated TLS 1.0 and 1.1.
Web security
HTTPS redirects, HSTS, browser security headers and servers that advertise their software versions.
Email and DNS
SPF, DMARC and CAA records, and internal addresses leaking into public DNS.
Hidden hostnames
Forgotten test, staging and remote-access servers found through public certificate logs.
Known vulnerabilities
Optional: thousands of checks for published flaws, default pages and exposed files. Detection only, never exploitation.