Free quick discovery
Find every subdomain
you forgot you owned.
Enter a domain. We'll pull subdomains from public certificate transparency logs, resolve their IPs, and surface what's exposed. No signup, no card.
Quick Discovery
Discover subdomains and IPs, no account needed
Sign in to unlock deeper enumeration
Discovery results
Run discovery to see results
Subdomains found
-
Apex IPs
-
What's covered
A free first pass. Register for the rest.
Quick Discovery uses the same CT-log feed our paid tier does, but stops short of brute-forcing or active probing. Free accounts unlock deeper enumeration.
Included in Quick Discovery
- Subdomains from CT logs (crt.sh)
- Apex IP resolution
- Up to 30 subdomain IP resolutions
- No signup, no card, no follow-up email
Free account adds
- +Brute-force subdomain enumeration
- +12 discovery sources (CT, DNS, Shodan, …)
- +ASN-based asset discovery
- +Saved discoveries with delta tracking