Public attack surface for acme-corp.example
This is the board-readable view you receive the moment a free scan completes: what an attacker or auditor can see from the outside, ranked by what matters first.
FINDINGS BY SEVERITY
PRIORITIZED FINDINGS
Why it matters: An authentication portal for an internal tool is reachable from the public internet without IP allow-listing.
Recommended next step: Restrict access behind VPN/allow-list or take the host offline; rotate any credentials that may be exposed.
Why it matters: The certificate expired 6 days ago; browsers will warn users and integrations may reject the connection.
Recommended next step: Renew and automate certificate issuance (ACME) to prevent recurrence.
Why it matters: A database service responds to external connections, dramatically widening the attack surface.
Recommended next step: Bind the service to the private network and firewall the port; audit access logs.
Why it matters: Without SPF/DMARC the domain can be spoofed in phishing campaigns against staff and customers.
Recommended next step: Publish SPF and a DMARC policy (start at p=none, monitor, then enforce).
This is a sample. Run it on your own domain — free.
Start with an instant demo scan — no verification needed. Validate your domain to get this exact report for your real public surface. No card required.
Explore your public surface