Free attack surface scan
Map everything you expose to the internet — assets, open ports, services and known CVEs — from one domain.
Free · no account · instant.
What it checks
We enumerate the domains, subdomains and IPs reachable from the public internet.
Every responding port is tested and the service behind it is fingerprinted.
Detected software versions are matched against known CVEs, with KEV flags.
Certificate health, DNS hygiene and SPF/DKIM/DMARC are checked along the way.
Frequently asked
Yes — enter a domain and get a full external exposure report in minutes, with no account and no credit card.
No. The scan is agentless and outside-in — it sees exactly what an external attacker would, using only public signals.
Any domain you want to assess. The scan is non-intrusive reconnaissance; continuous monitoring of a domain requires DNS ownership verification.
Want this continuously, not once?
The free tool is a snapshot. SICenter monitors your whole estate and alerts you the moment something changes.
Start monitoring free