Intelligence & OSINT · free, no signup
OSINT Exposure Scanner
Scan a domain you own or are authorized to assess and see the footprint an attacker would map first — registration and DNS records, email-authentication posture, certificates and the hostnames exposed in public certificate logs, plus your public web security posture. Every finding cites the source it came from and when it was observed. Passive, public sources only.
Authorized, defensive use only. Check assets you own or lawfully public data. This tool is educational and never provides another party's private data.
What happens to what you enter
- The analysis runs on Solvex servers. What is recorded afterwards is a SHA-256 hash of your input and a coarse summary of the outcome — never the input itself, and never a result you could be identified from.
- Tools that read public sources (certificate logs, DNS, a public chain) contact those sources from our servers through a fetcher that refuses private and internal addresses.
- An email address is stored only where a tool offers to send you a report and you choose to give one.
Limits: five runs of this tool per minute from one address, and three signed reports per minute. Past that the tool says so and tells you when to try again.
When a free check is not enough
This tool reads what is public and reports what it can see. The OSINT Exposure Assessment engagement is the authorized, specialist-led version: signed scope, findings proven by hand, a signed report, and a retest.
Explore OSINT Exposure Assessment