Monitoring
Attack Surface Monitor
Every scan run through the vulnerability scanner is tracked over time. Look up a domain to see its last recorded security posture — risk grade, open findings, and when it was last assessed — then re-scan to refresh it and see exactly what changed.
Under the hood
How attack surface monitoring works
01 · Scan
Every scan run through the vulnerability scanner records a compact snapshot of the target's posture — risk grade, score, and open findings.
02 · Track
Snapshots are retained per domain, so the security posture of a host is tracked over time rather than being a one-off result that disappears.
03 · Compare
Re-scanning surfaces exactly what changed — new findings, resolved issues, and grade movement — so drift and regressions are easy to spot.
Attack surface monitoring is how mature security programs stay ahead of drift: an environment that was clean last month can regress when a new subdomain is exposed, a security header is dropped, a certificate lapses, or a forgotten endpoint comes back online. Continuously tracking a domain's external posture turns a point-in-time scan into an early-warning signal. Results are best-effort indicators from automated checks and should be validated before action.
FAQ
Frequently asked questions
What is attack surface monitoring?+
Attack surface monitoring is the practice of continuously tracking everything about a system that is exposed to the internet — domains, subdomains, services, certificates, headers, and known findings — so that changes and new risks are detected over time rather than only during a one-off assessment.
How is a domain's posture tracked over time?+
Each time a domain is scanned with the vulnerability scanner, a snapshot of its risk grade, score, and findings is stored. Looking the domain up here shows the most recent snapshot, and re-scanning highlights what changed since the previous one.
Is this free and does it require an account?+
Yes — the monitor and the underlying scanner are free and require no signup. Passive checks can be run against any public domain; active/intrusive checks require you to confirm authorization for the target.
Can I monitor a domain I don't own?+
You can look up the last recorded posture of any public domain and run passive, read-only checks. Active testing — probing for injection, misconfiguration, or brute-forcing paths — must only be performed against systems you own or are explicitly authorized to test.