All the features you need
Everything for subdomain enumeration in one platform.
Passive Scanning
Passive reconnaissance to fetch subdomains from a wide range of sources, similiar to that of traditional subdomain enumeration tools.
Active Scanning
Bruteforcing subdomains using lightning fast scanners, common wordlists, and specially crafted dynamic wordlists.
Permutations & Alterations
Detecting patterns in known subdomains and generating millions of possible combinations to find subdomains static wordlists miss.
Continuous Monitoring
24/7 scans to discover new subdomains and DNS records without requiring any human interaction.
Alerts
Custom notifications for when new subdomains are discovered, DNS records change, or when they match/contain a given string.
DNS History
A full history of changes to DNS records from the time of the first scan.
Powerful API
Full access to the PacketEngine API and command line tool to integrate with other tools or your existing workflow.
Filtering Coming Soon
Manually filter out invalid subdomains that our own checks missed.
Recursive Scanning
Automatically bruteforce fourth-level subdomains (foo.bar.example.com) of known subdomains.
Artificial Intelligence Pro+
Subdomain enumeration using a powerful artificial intelligence model to think like a human instead of a machine.
Custom Wordlists Business
Upload your own wordlists and have our scanners breeze through them effortlessly.
On-demand Scanning Business
Freedom to run scans as you please in order to obtain faster results.