kkeygraph/SECURITY LAB
LOCAL WORKSPACE
DOMAIN RECON

Map a domain’s footprint.

Subdomains, DNS, email authentication and TLS — from public sources only. No host is contacted beyond the one you submit.

Passive discovery (subdomains, DNS, email, TLS) needs no permission. Checking the box authorizes active security checks against the submitted host (templated vulnerability & misconfiguration checks), which can take a few minutes.

Enter a domain to begin.
Advanced — standalone developer tools

Run an integrated tool as-is and see its normalized, redacted results. js-recon / keyleak / gitleaks / trufflehog / betterleaks / retire.js scan pasted source offline; active tools that contact a target run from the main scan, which requires permission confirmation.