IronSky

Free Security Scan

Find out what is exposed on your external attack surface. Takes about 60 seconds. No install, no agent, no commitment.

What We Check

Subdomain Discovery

We scan certificate transparency logs and multiple DNS sources to find subdomains you might not know about.

Email Security

SPF, DKIM, DMARC, and MTA-STS records checked against your domain. These control whether attackers can spoof your email.

SSL/TLS Certificates

Certificate validity, expiry dates, and issuer details. Expired certificates are a signal to attackers that a service is not being maintained.

Data Breach Exposure

We check if your domain appears in known data breaches. No actual credentials are shown, only breach names and exposed field types.

GitHub Code Exposure

Public repositories searched for references to your domain. API keys, internal URLs, and configuration files sometimes end up where they should not be.

The scan is completely passive. We do not touch your infrastructure. Everything is based on publicly available data.

Your full report is emailed to you after the scan completes. What you see on screen is a summary.