Secri Radar continuously discovers subdomains across your organisation, detects dangling DNS records and takeover vulnerabilities, and alerts your team in real time — before attackers act.
Subdomain takeover risk
staging.acme.com
CNAME → deprovisioned Heroku app
Dangling CNAME detected
cdn.acme.com
Points to deleted CloudFront distribution
Orphan subdomain
old-api.acme.com
No DNS response — potentially abandoned
100+
Takeover signatures
< 5 min
Alert latency
24 / 7
Continuous scanning
3 methods
Discovery techniques
How it works
01
Enter the root domain you want to monitor. We support any public domain — no DNS changes required.
02
Our scanners run around the clock — pulling CT log entries, brute-forcing DNS, and HTTP-probing every subdomain we find.
03
When a takeover risk or orphan subdomain is detected, you're notified within minutes via email or Slack.
Features
From passive discovery to active exploitation checks, Secri Radar covers the full subdomain attack surface.
Every TLS certificate ever issued is public. We parse CT logs continuously to surface new subdomains the moment they appear — before attackers do.
Our curated wordlist probes tens of thousands of common subdomain patterns against your domains using parallel DNS resolution.
We actively probe discovered subdomains and match HTTP responses against a signature library of 100+ vulnerable cloud services.
Dangling CNAMEs, orphaned S3 buckets, deprovisioned Heroku apps — we identify exploitable misconfigurations before attackers claim them.
Get notified the moment a risk is detected. Route critical findings to Slack channels, email inboxes, or your own webhook endpoint.
Manage multiple organisations and domains from one dashboard. Invite team members with role-based access control.
The threat is real
When a CNAME record points to a cloud service you no longer own — an S3 bucket, a Heroku app, a Fastly endpoint — an attacker can register that service and serve arbitrary content from your domain.
What Secri Radar protects against
Pricing
Start free. Upgrade when your attack surface grows.
Free
For individuals exploring their attack surface.
Pro
or $1,000/year — save 2 months
For security teams with real monitoring needs.
Enterprise
For large organisations with complex requirements.
Add your first domain in under a minute. No credit card required.
Create your free account