Infrastructure intelligence for business teams

Infrastructure OSINT with evidence you can defend

Map a domain’s footprint — subdomains, IP addresses, name servers, certificates and exposed web services — from public sources. Every finding traces back to raw evidence with a SHA-256 hash, its source and a UTC timestamp.

Paid trial from €19 · EU-hosted · For verified business customers

Capabilities at launch

Infrastructure sources, curated and sandboxed

Each source is reviewed for licence and terms of use, runs in an isolated container behind an egress proxy and has a published credit cost.

  • DNS records

    A, AAAA, MX, NS, TXT, CNAME and SOA records, resolved and normalised for every target.

  • Certificate transparency

    Discover subdomains from public CT logs and see which certificates cover which hosts.

  • RDAP / WHOIS

    Registration data for domains, IP ranges and ASNs: registrar, dates, status and network owner.

  • Reverse DNS

    Map IP addresses back to host names to reveal shared hosting and related assets.

  • HTTP service probing

    Check which hosts answer on the web, with status codes, titles, TLS details and redirects.

  • Evidence & reports

    Raw output stored with SHA-256 hashes, then reviewed findings exported as PDF, HTML or JSON.

Not at launch Person searches (usernames, emails, phone numbers) are not available at launch. They are coming later, for verified customers only.

How it works

One pipeline, seven auditable stages

Every investigation runs the same stages. Each is idempotent, persisted and visible live in the app.

  1. Policy

    Checks plan, verification level, purpose, opt-out list, credits and rate limits. A job rejected here costs nothing.

  2. Normalize

    Canonicalises targets (IDNA, lowercase) and validates their format.

  3. Enumerate

    Expands targets into subdomains and related assets, within your plan limits.

  4. Extract

    Runs the tools in sandboxed containers and stores raw output as evidence.

  5. Enrich

    Adds context such as registration data and network ownership, cached per source.

  6. Validate

    Removes false positives and scores the confidence of each finding.

  7. Correlate

    Links entities into a graph and re-checks restrictions before results are shown.

Evidence with provenance

Raw tool output is stored encrypted in the EU. Each item records a SHA-256 hash, the source, the tool version and a UTC timestamp, so every finding in a report traces back to what was actually collected.

sha256
9f2c4e1d07a3…5c88b71e41a
source
rdap · example.com
tool
rdap-client 1.4.2
collected
2026-10-30T14:02:11Z

Pricing

Simple, credit-based plans

Credits are reserved when a job starts and the unused part is refunded when it ends, including for tools that fail.

No free tier — the trial is paid and covers infrastructure (Tier A) investigations.

  • Trial

    Try the platform on your own infrastructure.

    €19 one-time

    • 150 credits
    • 1 seat
    • 7 days evidence retention
    • Infrastructure (Tier A) investigations
    Start trial
  • Starter

    For small security and due-diligence teams.

    €149 per month

    • 1,500 credits per month
    • 2 seats
    • 30 days evidence retention
    • Infrastructure (Tier A) investigations
    • Person searches: coming later, after verification
    Choose Starter
  • Enterprise

    For larger organisations with specific needs.

    Custom

    • Custom credit volume
    • Custom seats
    • Custom retention
    • Infrastructure (Tier A) investigations
    • Contract, negotiated DPA and invoicing
    • Person searches: coming later, after verification
    Contact sales

Prices in EUR, excluding VAT.

Trust & compliance

Built for accountable investigations

We are an EU business based in Greece. Compliance is part of the product, not an afterthought.

EU hosting
Application, database and evidence storage run in the EU. Non-EU subprocessors are listed with their transfer safeguards.
GDPR by design
Retention limits per plan, encrypted evidence, deletion that survives backup restores, and a 72-hour breach procedure with the Hellenic DPA as lead authority.
Clear roles
You are the controller of your investigation data and we act as your processor under our DPA. We are controller for account, billing and safety data.
Acceptable use
Every investigation records a declared purpose. No searches of minors, no use of breached credential contents — existence checks only.
Verified customers only
Business customers only, with accepted terms and company details. Abuse signals trigger review, restriction or suspension.
Person searches: coming later
Searches about people will require business verification, a named responsible person, MFA and a signed AUP addendum.

Start your first investigation today

Create an account, accept the terms and start a paid trial. Infrastructure investigations are available immediately.