Full external recon.
In seconds.

Full perimeter recon in one scan.

PRISM Recon maps the full scope of your external exposure using the same intelligence a skilled analyst uses across WHOIS, DNS, threat feeds, banner grabs, and port data in 15 seconds. Most IT teams are built to only monitor internal networks. PRISM Recon delivers deterministic, evidence-backed findings of the perimeter that are defensible in an audit or an incident. Findings are delivered only to you, and nothing is stored or shared with third parties.

• Cloud infraMixed provider fingerprinting — AWS, Microsoft Azure, Google Cloud, Wix, Automattic, Hetzner, and other major vendors identified automatically
• WAF / ProxyReverse proxy and CDN detection — Cloudflare, WAF presence, DDoS mitigation identified; origin IP exposure confirmed or flagged
• Email securitySPF, DKIM, DMARC posture — gateway identification, soft fail detection, spoofability assessment
• Attack surfaceExposed service detection — publicly accessible services flagged and mapped to MITRE ATT&CK techniques
• TLS healthReal-time expiry warnings with days-remaining countdown and certificate chain parsing
• SubdomainsDev and staging exposure — publicly accessible subdomains discovered and flagged automatically
• Ports & servicesOpen port enumeration with SSH version detection, cleartext protocol identification
• HTTP headersHeader inspection across all open ports — X-Frame-Options, Referrer-Policy, status codes, and server fingerprints
• Threat intelLive threat feed matching — IPs and domains checked against threat intelligence sources; clean or flagged surfaced as a finding
• IntelligenceAnalyst summary, MITRE ATT&CK panel, auto-generated remediation recommendations, dynamic risk score