Real HEAD requests against your domain — actual status codes, not browser guesses. Free
Enter your domain and we'll probe 140+ attack paths and tell you exactly what's exposed.
Coming soon: browser-side scan — same probes, zero server cost.
Surface Area Scan
Real HEAD requests from our server. 140+ attack paths. Actual status codes. $5
✓ If your site is unreachable, you will not be charged. The $5 is only authorized; we capture it after the scan returns real results.
⚡ Same-wifi suspected — target responds significantly faster than an external reference.
Results reflect local network access, not public internet exposure.
Test from mobile data or a VPN for an external view.