Continuous External Attack Surface Monitoring

Know What's Exposed.
Fix What Matters.

SwarmHawk scans every internet-facing domain you own, maps how an attacker would move through it, and delivers a prioritized action plan on what to fix — not just another 500-page vulnerability report.

60M+
Domains Monitored
27
Security Checks
3,000+
CVE Templates
<60s
First Scan Result
🌍 150+ countries covered worldwide
🔍 Detects CVEs, blacklists, GitHub leaks
⚡ Scans update every 4 hours
🔒 Read-only, passive — no agents installed
🛡️ Built on MITRE ATT&CK framework

WORLD MAP

Risk by country

Hover or tap a country to see its breakdown. Colour shows composite risk score (0 safest, 100 most exposed).

—
Domains scanned
—
With known exploited vulns
—
Missing HSTS
—
Mail without DMARC
Live data is temporarily unavailable. Refreshing — try again in a few minutes.
Low
High

New — OSINT Intelligence

Beyond the Scan.
What's Already Public About You.

Most scanners check your domain from the outside. SwarmHawk also checks what attackers find on GitHub, CISA, and across the open web — before they can use it against you.

🔓
GitHub Credential Leak Scan
Searches all public GitHub code for your domain name alongside credential keywords — passwords, API keys, tokens. Catches accidental .env commits before attackers do. Score impact: up to +20.
💣
GitHub PoC Exploit Hunter
Fingerprints your live tech stack (server, CMS, framework), then searches GitHub for public proof-of-concept exploit repos targeting those exact products. Escalates to CRITICAL if weaponised code (100+ stars) is found. Score impact: up to +15.
🛡️
CISA KEV Direct Matching
Matches your detected software stack against the full CISA Known Exploited Vulnerabilities catalog (1,200+ entries, updated daily). Flags ransomware-linked CVEs inline. Cached locally — zero extra network calls per scan. Score impact: up to +18.
📬
Security Contact Discovery
Verifies RFC 9116 security.txt presence, then falls back to scanning your public web pages via Jina Reader for a discoverable security contact. Required for GDPR Art.33 breach response and NIS2 Art.23 incident notification.

All 4 checks run automatically on every scan. Results appear in the same grouped sections as all other findings — dashboard, PDF report, and API response. Read the docs →


Pricing

Start Free. Scale When You're Ready.

No per-seat fees. One free domain scan to get started — upgrade for ongoing monitoring, API access, and portfolio-scale coverage.

Free
$0
Scan your first domain for free — no credit card needed.

  • 1 domain
  • Full security scan
  • Risk score dashboard
  • PDF report download
  • Multiple domains
  • API access
  • Ongoing monitoring
Get Started Free
Pro
$79/mo
For owners who want continuous coverage on a small domain portfolio.

  • Up to 10 domains
  • Unlimited rescans
  • Full 22-check scan engine
  • PDF reports + email alerts
  • NIS2 compliance check
  • Domain ownership verification
  • Priority support
Upgrade to Pro →
Enterprise
Custom
100+ domains, white-label API, dedicated support.

  • Everything in Business
  • Custom domain cap
  • Per-domain usage API
  • Custom per-service pricing
  • Priority support

Start with a free scan — no credit card required. Need custom volume? Talk to us.


Get Started

Your attack surface is already visible
to attackers. Is it visible to you?

Start with one domain, for free. No credit card. No setup. First result in under 60 seconds.