Skip to main content

Security Research & Development

Products

Two halves of the same exposure: what your organization leaves open, and what your people leave open.

01 / Attack surface

ShadowIndex.ai

Available

Attack surface scanning and intelligence, on demand

ShadowIndex.ai scans your external attack surface when you ask it to. Point it at a domain, IP address or range: it finds every subdomain and host, checks each one, and ranks the findings by real exploitability. Rescan a whole domain or a single host whenever you need fresh results. Anyone can register for free; comprehensive scans need a subscription.

  • Scans of a domain, IP address or range, from every subdomain down to each live host
  • Your choice of depth: passive collection that never touches the target, or active probes for vulnerabilities
  • Ranking by real exploitability (CISA KEV, EPSS, exploit signals), not CVSS score alone
  • Rescans of a whole domain or a single host whenever you need fresh results
  • Search across the wider host index, an entity graph of related infrastructure, and evidence-backed verdicts
  • Monitors that alert when a watched surface changes
Create a free account (opens in new tab)Plans at shadowindex.ai (opens in new tab)
One domain in, every host out: 49 subdomains found and checked in 33 minutes, worst first. Rescan any time

More from ShadowIndex

Scan on demand

New scan

Choose how hard to look: passive collections that never touch the target, an active web pass, or probes against every live host

Live scan

Hosts and findings fill in while the scan runs, follow-up scans included

Host dossier

Refresh any host on the spot: deep re-scan of services and certificates, a new scan, or re-enrichment

Search and investigate

Index search

Search every indexed host, not only yours: here, hosts with a CISA known-exploited CVE

Entity graph

Trace one address to every linked domain, netblock, network and owner

Investigation assistant

A verdict on a host, each point tied to its evidence, with the next step to take

Addresses, domains and names in these screens are replaced with documentation values.

02 / Executive exposure

ExecShield.ai

In Development

Executive digital protection and data removal

Attackers no longer start at the firewall. They profile your leadership using commercially available open-source intelligence — home addresses, phone numbers, family relationships — then pivot into the company through their personal lives. ExecShield.ai maps what that research turns up on your executives and their households, files statutory erasure requests against the brokers and people-search sites holding it, and keeps re-filing when the records come back.

Free corporate threat scan at execshield.ai (opens in new tab)Questions about coverage? Get in touch

Capabilities

  • Exposure discovery across people-search sites, broker listings, and darkweb indexes
  • Coverage extended to executives' households, not just the individual
  • Erasure filed under CCPA/CPRA, Texas DPSA, and other state data-broker statutes
  • Signed authorized-agent letters captured through an isolated client signing flow
  • Statutory deadline tracking with an auditable status trail per request
  • Reappearance monitoring that re-files when a removed listing returns

Roadmap

Correlating the two surfaces is on the roadmap; the products run independently today.