Search observed domains for exposed paths and misconfigurations.
Substring search over the domain, case-insensitive, at least 3 characters. E.g. staging., .org, test-.
When you run a search here, we store a small record of it.
No accounts, no tracking cookies, no cross-site tracking. We set one short-lived functional cookie to remember that you passed the anti-bot check, so you aren't challenged on every search.
These records are automatically deleted after at most 180 days.
To request deletion of data relating to you, contact us via the imprint on the main site: cerast-intelligence.com/impressum.
Running searches from a script or tool? You don't have to pass the human check — request an API key and skip it entirely.
Email [email protected] and tell us who you are and what you'll use it for. We'll send you a key. It's free — we just like to know who's using the data.
Send it as a header on every request:
Authorization: Bearer YOUR_KEY
Keyed requests skip the challenge and get a higher rate limit. One key per user, please.