EXTERNAL ATTACK SURFACE
Public Exposure Scanner
Analyze the publicly observable security exposure of a domain. Check DNS, HTTPS, TLS, email security, HTTP security headers, web configuration and detected technologies, then generate a detailed security report.
Domain Security Analysis
Enter a domain or website URL to start the analysis.
Starting analysis...
SCAN RESULT
-
-
0
/100
OVERALL RISK
-
-
0
Critical
0
High
0
Medium
0
Low
01
Publicly observable infrastructure
Attack Surface
Domain
-
HTTPS
-
HTTP Status
-
Redirects
-
IPv4
-
Subdomains
-
02
Domain configuration
DNS Security
A Record
-
AAAA Record
-
MX Record
-
NS Record
-
CAA Record
-
TXT Record
-
03
SPF, DKIM and DMARC
Email Security
SPF
-
DKIM
-
DMARC
-
DKIM is selector-dependent. The scanner checks common
public selectors and reports what it can verify
without guessing a private selector.
04
Transport security
SSL / TLS
TLS Version
-
Certificate
-
Certificate Authority
-
Expiration
-
05
HTTP security configuration
Security Headers
Strict-Transport-Security
-
Content-Security-Policy
-
X-Content-Type-Options
-
X-Frame-Options
-
Referrer-Policy
-
Permissions-Policy
-
06
Public website configuration
Web Security
HTTPS Enforcement
-
Secure Cookies
-
CORS
-
robots.txt
-
security.txt
-
07
Passive fingerprinting
Technology Detection
08
Identified configuration issues
Security Findings
09
Recommendations
10
Consolidated interpretation of scanner evidence
Assessment
CYBERSECURITY TRAINING
Start Learning
→
Take your cybersecurity skills further.
Practice cybersecurity through hands-on labs, challenges and real-world security scenarios with HackerDNA.
CVEWorks may earn a commission if you subscribe through this link.