outpostA LITTLE CURIOSITY GOES A LONG WAY.
What’s behind
that domain?
Websites are just the surface. Follow the public clues to the infrastructure, software, and security story underneath.
FOLLOW A CLUE
One address.
A much bigger story.
A mail server. A software version. A certificate about to expire. Choose a signal to see where it can lead.
An introduction to the signals, not live scan results.01The footprint
See the connections.
Discover the hostnames, IP addresses, mail servers, and hosting providers that a domain’s public records reveal. Shared infrastructure is identified so someone else’s service does not become your security finding.
Domain → Hostnames → Networks
02The software
Look under the hood.
Identify the technologies a website reveals. Compare disclosed versions with published vulnerabilities, with a clear distinction between a possible match and a confirmed weakness.
Technology → Version → Verification
03The history
Follow the trail forward.
Investigate a domain again and see what changed since last time: findings that appear or disappear, new hosts, and new software. Records from before your first investigation are not part of this edition.
First investigation → Changes → Latest
04The exposure
Know what deserves attention.
Understand configuration weaknesses and public exposure. Open the evidence, check the confidence, and follow practical next steps.
Observation → Evidence → Next step
PICK UP A THREAD
Recently investigated.
Your first rabbit hole awaits.
Enter a domain above for a free preview. With an account, your investigations are kept here, private to you.
Start an investigation ↑CURIOSITY, WITH CONTEXT
Clues aren’t conclusions.
Outpost shows what it found, where it came from, and what it can’t tell you. A version match isn’t proof of a vulnerability. A missing source isn’t a clean bill of health.
What happens when I investigate a domain?
Outpost combines public DNS, domain registry records, and vulnerability databases with a small number of ordinary requests to the domain’s own website and mail servers. It does not attempt logins, exploitation, or port scanning.
Some sources are not part of this edition: certificate transparency logs, internet-wide service indexes, and web archives. Every report lists what was and was not assessed.
The preview summarizes findings. A full report adds supporting evidence, the asset inventory, changes since earlier investigations, and remediation, and is unlocked with one credit. See pricing.