Reconnaissance
Subdomain finder
Discover published subdomains of a domain from public certificate transparency records. This is a passive query: no scanning is performed against the domain.
- Free, no sign-up or install
- We never store your data or your queries
- Secure lookups from our own server
Responsible use
Use these tools only on domains, addresses or credentials you own or are expressly authorised to assess. Their use is the sole responsibility of the person using them.
Every forgotten subdomain is attack surface
Misconfigured or stale subdomains are a frequent entry point. We audit your external perimeter and validate what is actually exploitable.