a look at what’s possible

scope-checked passive discovery
collects subdomains and hosts from public sources, then filters every result against the program's stated in-scope domains before anything is listed.
illustrative preview
change tracking between runs
compares each recon run with the previous one and highlights new hosts, removed hosts, and changed responses so only the differences need review.
illustrative previewScope-aware repeatable bug bounty recon pipeline for authorized programs, with passive discovery, cautious active checks, change tracking, and clean evidence.
what it'll do
already have an account? log in
free to add. it works free for 7 days, then needs pro.
built by a folk user. eligible creators earn when people use their skills. how creators earn