Free tool
Security surface check
Enter a domain to see what's publicly visible about its security posture — headers, TLS, cookies, and DNS hygiene.
This is a passive surface check — it only reads what a browser would see publicly. It is not a penetration test, doesn't attempt to access anything private, and can produce false positives. Point-in-time only.
This is the surface — a real engagement goes deeper.