Are you at risk for a subdomain takeover?

Dangling subdomains are a true security risk to your business both technically, and socially.

What is a subdomain takeover?

A subdomain takeover is when a malicious actor gains control of a subdomain that your company controls. This can let them host content that your brand may not agree with.

How can this happen?

Typically you set up a DNS record for a service, stopped using the service, and forgot to remove the record. It's still pointing to the same place, which lets an bad actor start responding to it.

What can you do about it?

The easiest solution is to maintain clean DNS records, which is what we help with. We monitor your DNS records and alert you when we find records that aren't in use.

Regular Monitoring

We re-check all of your records every hour, so we catch potential risks fast.

Alert you when something is fishy

When we find something that doesn't seem right, we notify you across multiple channels. For each issue, we'll alert you at most once per day until the warning is acknowledged.

Fix the Issue

Remove the dangerous DNS record. We understand that sometimes this can take some time, so we allow you to snooze alerts for a specific record for a short period of time. If the issue still isn't fixed, we'll give you a friendly reminder.

Simple, transparent pricing.

Always know what you'll Pay

$10/ zone/mo

Hourly checks
Up to 100 records per zone
Email support

FAQ

How do I set up my domain?

We require read access with your DNS provider in order to list all of your existing records, so your engineering team may have to help you with that. If you are having difficulty, our support team can help walk you through getting this set up.

Can't you find my DNS publicly?

Yes, and we do verify the zone file against public DNS services, however that risks us missing hidden records. Since we're trying to protect you, we want to be sure we're monitoring all of your records, not just the ones which can be easily determined.

Could someone use your service to find my subdomains and attack me?

No. By requiring access to the DNS provider of our clients, we're guaranteeing that we're only servicing the owner of the domain.If this is not possible, we require a verification DNS record be added in order to confirm ownership before we report any results.

For security purposes, I have a bunch of really small DNS zones, rather than one big one. Can your pricing accommodate this?

Yes. Our pricing is meant to be fair based on typical patterns, but we recognize that outliers exist. If you find yourself in this situation, please email our support team and we'll make the necessary arrangements.

I'm nervous about you having my list of subdomains. What do you do with this information?

We only use the DNS information we acquire for the purpose of monitoring those domains for you. Nothing else. Period.

Contact us

Got any questions? Don't hesitate to reach out.

Ready to get started?

Get Started Contact Us