External Attack Surface Monitoring

Attackers find the assets you forgot about. We find them first.

SCRYPEX maps internet-facing assets you didn't know you had, flags exposed or vulnerable services, and alerts on employee credentials in breaches and stealer logs — prioritized so you know what to fix first.

See your domain the way attackers do.
✓ No software to install·✓ Results in 2 minutes·✓ No credit card required
24/7
Continuous monitoring
< 2 min
Time to first findings
AES-256
Credential encryption
Stolen credentials and exploited vulnerabilities are among the leading initial access vectors in breaches — Verizon Data Breach Investigations Report

Free tools

Try SCRYPEX without an account

Run instant checks on any domain. No signup, no credit card, no software to install.

What we find on organizations like yours

Examples of external exposure signals we help surface (not every item is verified exploitable)

Exposed credentials
P0
Employee passwords found in breach databases and stealer logs
Email spoofing risk
P1
Missing DMARC allows attackers to send emails as your domain
Exposed services
P0
Admin panels and databases accessible from the public internet
Correlated attack paths
P0
Multiple risk signals combined into prioritized incident chains
Domain impersonation
P1
Lookalike domains registered to impersonate your brand
Exposure & CVE signals
P0
Public services and CVE matches tied to your stack, validated where probes confirm risk

Up and running in 2 minutes

No agents, no DNS changes, no professional services engagement.

01
Enter your domain
No software to install. No agents to deploy. Just your domain name.
02
We scan from the outside
We map your external footprint from the outside in: subdomains, open services, credential signals, and brand indicators.
03
Get actionable findings
Findings are prioritized by severity and evidence strength, with plain-English context and remediation guidance where available.

Exposures, leaked-credential signals, and misconfigurations in one platform.

SCRYPEX covers the external threat landscape: credential signals, attack surface drift, brand impersonation, and prioritized incidents.

Credential & Breach Intelligence

Monitor employee credentials in breach databases, stealer logs, and dark web sources. Surface leaked-credential signals tied to your domains.
  • Breach database monitoring
  • Stealer log & infostealer detection
  • Dark web threat actor alerts

External Attack Surface Management

Map internet-facing assets and surface exposure signals matched to your technology stack.
  • Subdomain & IP enumeration
  • Open port and service fingerprinting
  • CVE matching via CISA KEV + EPSS

Brand & Impersonation Protection

Detect lookalike domains, typosquats, and email spoofing infrastructure targeting your organization.
  • Lookalike domain detection
  • DMARC / SPF / DKIM gap analysis
  • Registrar abuse reporting

Prioritized Incident Response

Correlates related signals into ranked incident paths. Verified findings include plain-English remediation; weaker signals stay in review.
  • Severity-ranked incident queue
  • Attack path correlation
  • Remediation guidance on verified items

Simple, transparent pricing

Enterprise-grade external coverage without the enterprise sales call. Start free — no credit card required.

Starter
$179
/month
  • Up to 100 monitored assets
  • 3 root domains
  • Attack surface + brand abuse detection
  • SSL, email security, CISA KEV tracking
  • Add extra domains ($29/mo) or assets ($20/100/mo) anytime
Business
Most Popular
$349
/month
  • Up to 300 monitored assets
  • Up to 5 root domains
  • Credentials, dark web, ransomware intel
  • Domain takedown workflow + registrar abuse drafts
  • API tokens, share links, supply chain
  • Add extra domains ($29/mo) or assets ($20/100/mo) anytime
  • Deep Validation add-on: $399/run
Pro
$699
/month
  • Up to 1,000 monitored assets
  • Up to 15 root domains
  • Integrations (Jira, Teams, Slack, ServiceNow)
  • Advanced attack paths + Telegram intel
  • Add extra domains ($29/mo) or assets ($20/100/mo) anytime
  • Deep Validation: 1/quarter included

Start monitoring your external exposure

Continuous external attack surface management, credential monitoring, and digital risk protection — see exposure signals, leaked-credential indicators, and misconfigurations in one place.

No account required · Takes 2 minutes · Results are immediate