Focused diagnostics
Discovery tools
Run focused discovery checks with verdicts, measured values, evidence and exact fixes. Every tool is available in the browser and through the public SysGlass API.
Subdomain Finder
Free subdomain finder that lists every subdomain a public CA has issued a certificate for, pulled live from Certificate Transparency logs. Same data as crt.sh.
Input: example.com
Subdomain Takeover Audit
Free subdomain takeover checker. Detects when a host's CNAME points at a third-party service (GitHub Pages, Heroku, S3, Azure…) whose resource is unclaimed — letting an attacker hijack your subdomain.
Input: app.example.com
Origin Exposure Check
Free origin exposure check. See whether your real origin server IP leaks past your CDN/WAF (Cloudflare) through Certificate-Transparency subdomains, A/AAAA records, MX hosts or SPF — and whether a leaked IP actually serves the site when contacted directly, defeating the WAF.
Input: example.com