Open ports, detected software and the potential vulnerabilities derived from it.
Visuals show sample data.
Next step
From exposure check to proof of concept
The check shows the surface. In the proof of concept the full platform runs on your scope for 14 days: continuous discovery, verified vulnerabilities, dark web monitoring and alerts.
Figures carried over
The domain and the result of the check are already in the request.
Workspace within 24 hours
We set up the workspace and start the first analysis.
First analysisAssets, vulnerabilities, dark webScheduled
Onboarding call30 minutesOptional
Visuals show sample data.
Frequently asked questions
Yes. The exposure check is a free excerpt from the blacklens.io platform and comes with no obligation. You see the summary immediately in your browser. On request we walk you through the results, or you start the proof of concept: 14 days with the full feature set, free of charge and without a credit card, with the scope already prepared.
The result summarises your domain's publicly visible attack surface: subdomains and IP addresses, exposed hosts with open ports, reachable services by type, potential vulnerabilities, dark web records from infostealer logs and combolists, and the import-ready scope as the number of domains, own IPv4 ranges and services. The result deliberately shows figures only, no individual IP addresses or hostnames. Values a source could not deliver are marked as not measured instead of showing a misleading zero.
No. The exposure check is a purely passive analysis: it evaluates publicly available sources such as DNS and passive DNS records, internet scanner data, the RIPE database and breach and stealer databases. Active scans only run with your authorisation in the proof of concept or as a customer. They run exclusively from scan infrastructure in Austria, Germany and Switzerland and from fixed source IP ranges.
The exposure check analyses the company domain behind your email address. With free-mail domains such as gmail.com the result would not show your company, so we do not accept these addresses. It also ensures that information about an organisation's attack surface only goes to people who use an address of that organisation.
Your email address and the summary of the result are stored in our CRM so we can advise you on the result and answer follow-up questions. Processing takes place exclusively in the EU. You only receive a newsletter if you sign up for it separately. All details on the processing are in our privacy policy.
The proof of concept is the 14-day trial of the full platform, free of charge and without a credit card. Your domain and the result of your exposure check are carried into the request; we set up the workspace within 24 hours and start the first analysis. From then on continuous asset discovery, vulnerability scans with more than 200,000 tests, dark web monitoring and alerts run on your entire attack surface. We review the first findings together, and the access ends automatically.
The check queries several independent sources. If a source does not answer or holds no data, we show the value as not measured rather than as zero. This matters most for dark web findings: no data does not mean that no credentials are in circulation. In the proof of concept the platform checks these sources continuously and with full access.
An exposure check shows the entry points attackers look for before an attack: exposed VPN gateways, forgotten test systems, outdated software and leaked passwords. Access brokers sell such access on to ransomware groups. Knowing these points lets you close them before they are exploited. For continuous monitoring instead of a snapshot, attack surface management is the right approach.
See your attack surface within 24 hours.
We set up your workspace and walk you through the first findings.
