Free quick discovery
Find every subdomain
you forgot you owned.
Enter a domain. We'll pull subdomains from public certificate transparency logs, resolve their IPs, and surface what's exposed — no signup, no card.
Quick Discovery
Discover subdomains and IPs — no account needed
Sign in to unlock deeper enumeration
Discovery results
Run discovery to see results
Subdomains found
—
Apex IPs
—
What's covered
A free first pass — register for the rest.
Quick Discovery uses the same CT-log feed our paid tier does, but stops short of brute-forcing or active probing. Free accounts unlock deeper enumeration.
Included in Quick Discovery
- Subdomains from CT logs (crt.sh)
- Apex IP resolution
- Up to 30 subdomain IP resolutions
- No signup, no card, no follow-up email
Free account adds
- +Brute-force subdomain enumeration
- +12 discovery sources (CT, DNS, Shodan, …)
- +ASN-based asset discovery
- +Saved discoveries with delta tracking