A LITTLE CURIOSITY GOES A LONG WAY.

What’s behind
that domain?

Websites are just the surface. Follow the public clues to the infrastructure, software, and security story underneath.

PUBLIC SIGNALS, CONNECTED.

Any public domain. Free preview. No account needed.

FOLLOW A CLUE

One address.
A much bigger story.

A forgotten subdomain. A software version. A certificate from years ago. Choose a signal to see where it can lead.

An introduction to the signals, not live scan results.
01The footprint

See the connections.

Discover hostnames, IP addresses, hosting providers, and indexed services. Shared infrastructure is identified so someone else’s service does not become your security finding.

Domain → Hostnames → Networks

02The software

Look under the hood.

Identify the technologies a website reveals. Compare disclosed versions with published vulnerabilities, with a clear distinction between a possible match and a confirmed weakness.

Technology → Version → Verification

03The history

Follow the trail back.

Explore certificate records and archived hosting observations. See what used to be there, with gaps and source coverage made explicit.

First seen → Changes → Latest sighting

04The exposure

Know what deserves attention.

Understand configuration weaknesses and public exposure. Open the evidence, check the confidence, and follow practical next steps.

Observation → Evidence → Next step

PICK UP A THREAD

Recently investigated.

Shared history on this Outpost instance

Your first rabbit hole awaits.

Enter a domain above. You can come back here to explore its findings and history.

Start an investigation ↑

CURIOSITY, WITH CONTEXT

Clues aren’t conclusions.

Outpost shows what it found, where it came from, and what it can’t tell you. A version match isn’t proof of a vulnerability. A missing source isn’t a clean bill of health.

What happens when I investigate a domain?

Outpost combines public DNS, certificate logs, registry records, internet indexes, and vulnerability databases with limited website requests. It may confirm services on ports already reported by public indexes, excluding shared platforms. It does not attempt logins, exploitation, or broad port scanning.

The preview summarizes findings. Full reports add supporting evidence, asset inventory, history, and remediation, and are currently free in the research edition. Accounts and credits are planned.