Atlas: your organisation’s external attack surface
Atlas discovers what an organisation exposes on the Internet: domains, subdomains, open ports and the services that answer. The product is in development and is not yet open to the public.
The problem
Organisations often expose more than they think: a forgotten subdomain, a test environment left online, a cloud service opened without IT approval. These items do not appear in internal inventories, because nobody declared them. An outside view finds them.
What we are building
- Domain discovery: enumeration of subdomains from public DNS records and Certificate Transparency logs.
- Ports and services: a check of a list of common ports, and identification of the services that respond.
Atlas is designed to process only domains whose ownership has been verified. Intrusive, fuzzing and denial-of-service checks are excluded by default.
Who it is for
- Security managers and IT directors of SMEs, who want to see their exposure without installing an agent on their machines.
- IT service providers that manage several clients, with separation per organisation (see MSP).
How it is built
Each organisation’s data is separated at the database level. A web interface and a programming interface (API) are planned, with roles per member of the organisation.
Project status
In development. Early access is open by invitation during the alpha phase. Verified domains receive scheduled recurring scans (daily, weekly or monthly).
Our scanner identifies itself publicly. See Our scans.
Each scan gets a maturity score out of 100. Its formula is public: see How the maturity score is calculated.