Free footprint report

Everything the internet already knows
about your domain.

Every subdomain ever issued a certificate, every lookalike registered against you, and any cert about to expire — from public data, in seconds. No signup.

Public sources only — Certificate Transparency, DNS and RDAP. We never scan or probe your servers.

Subdomains

Every hostname under your domain that's ever appeared in a Certificate Transparency log — including the staging box you forgot.

Lookalikes

Typo, homoglyph and TLD-swap permutations of your domain, checked against RDAP to see which are already registered.

Cert expiry

The not_after date on the certificates we can see, so a lapse never takes your app dark by surprise.