The inventory of your assets and its map
Hosts, IP addresses and open ports, certificates and technologies seen by the latest audits, with filters, CSV exports and a map of who hosts what.
The Inventory page lists what the latest audit of each proved domain saw: hosts, IP addresses and their open ports, certificates, technologies, and who hosts what. Nothing new is probed to build it: it is what the audits already read. It fills after the first full audit of a proved domain.
The tabs
- Hosts: every host of your domains, with its domain, its addresses (or its alias, when it is a CNAME), who hosts it and the CDN or firewall in front of it, whether it answers over HTTPS (and offers HTTP/3) and its certificate. A host known only from the certificate logs, or without an address, is marked as such.
- IP addresses: each address with the hosts that point to it, its open ports, who hosts it, the technologies seen on it and its known flaws. An address with no host of your domain is usually a mail server (MX) that may belong to your mail provider.
- Certificates: the certificate of each host, its issuer, its expiry date and the days left, so the next renewals are easy to see.
- Technologies: web server versions, WordPress and outdated JavaScript libraries, with their version, where they were seen and how (port scan data or the page itself). The home page’s third-party scripts are listed by origin, marked when they are loaded without Subresource Integrity (SRI), and so are the trackers it loads before any consent.
- Map: a picture of your surface, from each domain to its hosts, to their addresses, to who hosts them.
Who hosts what
The provider is recognised without any new request: a CDN by the address ranges the audit already knows (Cloudflare, for instance), a platform by the target of the host’s alias (Netlify, Shopify, GitHub Pages, Vercel, Azure, Google Cloud, Amazon Web Services and others). When nothing matches, the provider is left unknown. A CDN or web application firewall that the site’s own answer names in its headers (Cloudflare, CloudFront, Akamai, Fastly, Sucuri, Imperva and others) is shown too, as “behind …” when it is not the host itself.
Filter, sort and export
Each tab has a Filter box (a name, an address, a provider…), a choice of domain and a sort (by name, domain, expiry or open ports, depending on the tab). Export (CSV) downloads the tab as shown.
The map shows up to 60 hosts per domain, and leaves out hosts without an address.
Keep it current
The inventory is as fresh as the latest audit of each domain (the date is shown per domain). Changes between two audits, such as a new subdomain or a port that opened, are listed on the Changes page. The dashboard’s Surface figure counts hosts and addresses the same way as this page.