Infrastructure intelligence for business teams
Infrastructure OSINT with evidence you can defend
Map a domain’s footprint — subdomains, IP addresses, name servers, certificates and exposed web services — from public sources. Every finding traces back to raw evidence with a SHA-256 hash, its source and a UTC timestamp.
Paid trial from €19 · EU-hosted · For verified business customers
- Registrar
- Example Registrar, Inc.
- Registered
- 2009-04-14
- Expires
- 2027-04-14
- Subdomains
- 14
- CT certificates
- 37
sha256:9f2c4e…b71e41a Capabilities at launch
Infrastructure sources, curated and sandboxed
Each source is reviewed for licence and terms of use, runs in an isolated container behind an egress proxy and has a published credit cost.
-
DNS records
A, AAAA, MX, NS, TXT, CNAME and SOA records, resolved and normalised for every target.
-
Certificate transparency
Discover subdomains from public CT logs and see which certificates cover which hosts.
-
RDAP / WHOIS
Registration data for domains, IP ranges and ASNs: registrar, dates, status and network owner.
-
Reverse DNS
Map IP addresses back to host names to reveal shared hosting and related assets.
-
HTTP service probing
Check which hosts answer on the web, with status codes, titles, TLS details and redirects.
-
Evidence & reports
Raw output stored with SHA-256 hashes, then reviewed findings exported as PDF, HTML or JSON.
Not at launch Person searches (usernames, emails, phone numbers) are not available at launch. They are coming later, for verified customers only.
How it works
One pipeline, seven auditable stages
Every investigation runs the same stages. Each is idempotent, persisted and visible live in the app.
-
Policy
Checks plan, verification level, purpose, opt-out list, credits and rate limits. A job rejected here costs nothing.
-
Normalize
Canonicalises targets (IDNA, lowercase) and validates their format.
-
Enumerate
Expands targets into subdomains and related assets, within your plan limits.
-
Extract
Runs the tools in sandboxed containers and stores raw output as evidence.
-
Enrich
Adds context such as registration data and network ownership, cached per source.
-
Validate
Removes false positives and scores the confidence of each finding.
-
Correlate
Links entities into a graph and re-checks restrictions before results are shown.
Evidence with provenance
Raw tool output is stored encrypted in the EU. Each item records a SHA-256 hash, the source, the tool version and a UTC timestamp, so every finding in a report traces back to what was actually collected.
- sha256
- 9f2c4e1d07a3…5c88b71e41a
- source
- rdap · example.com
- tool
- rdap-client 1.4.2
- collected
- 2026-10-30T14:02:11Z
Pricing
Simple, credit-based plans
Credits are reserved when a job starts and the unused part is refunded when it ends, including for tools that fail.
No free tier — the trial is paid and covers infrastructure (Tier A) investigations.
-
Trial
Try the platform on your own infrastructure.
€19 one-time
- 150 credits
- 1 seat
- 7 days evidence retention
- Infrastructure (Tier A) investigations
-
Starter
For small security and due-diligence teams.
€149 per month
- 1,500 credits per month
- 2 seats
- 30 days evidence retention
- Infrastructure (Tier A) investigations
- Person searches: coming later, after verification
-
Team
Most popularFor teams that investigate every week.
€449 per month
- 6,000 credits per month
- 5 seats
- 90 days evidence retention
- Infrastructure (Tier A) investigations
- Person searches: coming later, after verification
-
Enterprise
For larger organisations with specific needs.
Custom
- Custom credit volume
- Custom seats
- Custom retention
- Infrastructure (Tier A) investigations
- Contract, negotiated DPA and invoicing
- Person searches: coming later, after verification
Prices in EUR, excluding VAT.
Trust & compliance
Built for accountable investigations
We are an EU business based in Greece. Compliance is part of the product, not an afterthought.
- EU hosting
- Application, database and evidence storage run in the EU. Non-EU subprocessors are listed with their transfer safeguards.
- GDPR by design
- Retention limits per plan, encrypted evidence, deletion that survives backup restores, and a 72-hour breach procedure with the Hellenic DPA as lead authority.
- Clear roles
- You are the controller of your investigation data and we act as your processor under our DPA. We are controller for account, billing and safety data.
- Acceptable use
- Every investigation records a declared purpose. No searches of minors, no use of breached credential contents — existence checks only.
- Verified customers only
- Business customers only, with accepted terms and company details. Abuse signals trigger review, restriction or suspension.
- Person searches: coming later
- Searches about people will require business verification, a named responsible person, MFA and a signed AUP addendum.
Start your first investigation today
Create an account, accept the terms and start a paid trial. Infrastructure investigations are available immediately.