Free external exposure scan

See what attackers can already see about your company

Give us a work email and your domain. A Cybool analyst reviews what is exposed from the outside and sends you a report within 2 business days.

Passive checks only. We never need access to your systems.

What the report covers

Exposed services

Open ports, expired certificates, public cloud storage and misconfigured services visible from the internet.

Leaked credentials

Employee credentials tied to your domain in breach and dark web sources.

Email security

How your SPF and DMARC records hold up, and how easy your domain is to spoof.

Prefer to talk first? Talk to an analyst

About the scan

What the free exposure scan checks

The scan looks at your company the way an attacker does before an intrusion: from the outside, with no access to your network. A Cybool analyst checks the services your domain exposes to the internet, searches breach and dark web sources for employee credentials tied to your domain, and tests how well your email records stop spoofing.

Nothing is installed and nothing is scanned inside your network. You get a written report within 2 business days, with the findings ranked and a short note on what to fix first.

Is the scan really free?

Yes. There is no charge and no obligation. We offer it because it is the clearest way to show what a SOC watches for.

Do you need access to our systems?

No. Everything is checked from the public internet and public breach sources.

Why do you ask for a work email?

The report contains sensitive findings about your domain, so we only send it to an address on that domain.

How long does it take?

The report arrives within 2 business days of your request.