HumanRisk Shield Exposure
Sign in Run free scan
Autonomous Exposure Intelligence

Find what attackers already know about your company.

Spoofable email, look-alike domains, leaked credentials and exposed executives, read from public sources in about 30 seconds.

A Cloudflare human check runs in the background and only asks for a click when it has to.

Book a demo

Free · No sign-up · Public sources only · Watch the 2-minute demo

Live scan

Scanning

About 30 seconds. Every check reads public sources only, and each one appears here as it finishes.

Starting

    Reading DNS, mail authentication, look-alikes, certificates and breach signals…

    Exposure snapshot

    Your exposure snapshot

    Get the full report
    – —
    0Critical
    0High
    0Medium
    0Low
    Fix these first

    Where to start.

    Ranked by what an attacker would use first. Each says what to change, in your own DNS or accounts. The full report names the exact accounts, people and hosts.

    Every check

    Where each check landed.

    How this could be used

    The usual way in, against what this scan saw.

      Select a stage to see what it is, and what breaks it.

      Full report

      Get the full report at your company inbox.

      It names the people and accounts behind each finding, so we only send it to an address at the domain you scanned.

      • Every finding, with the evidence behind it
      • Which accounts are in breach and infostealer data, and when
      • The leaders named on your pages, and their exposure
      • Every registered look-alike, with its mail and web status
      • The record or setting that fixes each one

      One email with a private link to the report. See our privacy notice.

      Keep watching

      Exposure changes every week.

      New look-alikes get registered and new leaks surface. HRS Exposure re-scans on a schedule, alerts on change and proves each fix with a re-scan.

      Watch the 2-minute demo Book a demo
      Inside HRS Exposure

      From a free scan to a closed finding.

      The snapshot is where it starts. The console keeps watching your domains, ranks what an attacker would use first, and proves each fix with a re-scan.

      Watch the 2-minute demo
      Demo workspace · Example data
      What the free scan returns

      A grade, and the first thing to fix.

      Exposure snapshotSample scan · Example data
      northwind.example Grade D · Needs attention 9 findings across 7 checks
      CriticalAccounts in infostealer logs
      HighMail can be forged as this domain
      Medium3 look-alike domains registered
      Free vs full

      The snapshot is free. The names go to your inbox.

      The full report names the people and accounts behind each finding, so it only goes to an address at the domain you scanned.

      Compare what you get
      Validate

      A fix counts when a re-scan says so.

      Every claimed fix is checked by the next scan. One that does not hold is reopened, not quietly closed.

      See the whole loop
      The HRS Exposure remediation view: fixes verified by a re-scan, fixes awaiting proof, and open work with owners and due dates.
      Demo workspace · Example data
      How it works

      Thirty seconds, three steps.

      No account, no agent, nothing installed. We read what anyone on the internet can already see.

      01

      Enter a domain.

      Your company domain, or your work email and we take the domain from it.

      02

      Seven checks run at once.

      DNS, certificate logs, your public pages and breach data. You watch each one finish. Nothing touches your systems.

      03

      Fix the first things today.

      A grade, what to fix first and how, and the full report at an inbox on your domain.

      What we check

      Seven checks. Three things attackers go after.

      Your people, your brand and your organization. Each check is a route in that starts with public information, and each result says how to close it.

      • People · Brand · Organization

        Who they would pretend to be, mail that looks like you, and where a stolen password works.

        Run free scan
      • People

        Executive exposure

        Leaders named on your public pages, and whether their accounts show up in leaks. The target list for CEO fraud.

      • People

        Leaked credentials

        Accounts on your domain in breach data and infostealer logs, with the fresh ones ranked first.

      • Brand

        Email spoofing

        Whether mail can be forged as your domain: SPF, DKIM and DMARC as published. The start of most invoice fraud.

      • Brand

        Look-alike domains

        Registered near-copies of your name, and which of them can already send or receive mail.

      • Organization

        Sign-in surface

        VPN portals, webmail and admin logins anyone can find under your domain. Where a stolen password gets typed.

      • Organization

        Third parties

        Who runs your DNS, who may send mail as you, and who sees your mail flow, read from public records.

      • Organization

        Web and TLS

        Certificate health and the security headers a modern site is expected to send.

      See it in two minutes

      From a domain to a closed finding.

      A free scan, the console, AI agents proposing the fix, and a re-scan that proves it, in the real product on a demo company.

      Scan your own domain
      Autonomous, end to end

      Not a one-off scan. A loop that runs itself.

      The free snapshot is stage two of five. Inside HRS Exposure every stage runs on its own: agents work out what matters, it acts where you allow it, and a re-scan proves each fix instead of assuming it.

      1

      Scope

      Your verified domains, re-proved every month, weighted by what each is worth to the business, with out-of-scope hosts set aside.

      2

      Discover

      Subdomains from certificate logs and where they are hosted, your other domains, look-alikes, third parties and identity posture.

      The snapshot is here
      3

      Prioritize

      One severity scale across every check, ranked by CISA KEV and EPSS exploit intelligence, attack paths and what the asset is worth.

      4

      Validate

      A re-scan behind every claimed fix, run automatically when an agent spots one if you allow it, accepted risks that expire, and captured evidence for look-alike domains.

      5

      Mobilize

      Tickets in Jira, ServiceNow, GitHub or ConnectWise; SIEM, Slack and Teams alerts, overdue escalations; registrar takedown requests.

      Free vs full

      The snapshot is free. The names go to your inbox.

      The full report names the people and accounts behind each finding, so it is only ever sent to an address at the domain you scanned.

      What you getFree snapshotFull reportHRS Exposure
      Grade, score and every check's statusIncludedIncludedIncluded
      What to fix first, and howIncludedIncludedIncluded
      Every finding, with its evidenceNot includedIncludedIncluded
      The people and accounts behind each findingNot includedIncludedIncluded
      Where you get itThis pageAn inbox at your domainYour console
      Continuous monitoring and change alertsNot includedNot includedIncluded
      Human Risk attributionNot includedNot includedIncluded
      Remediation workflows, proved by re-scanNot includedNot includedIncluded
      Exploit intelligence (CISA KEV, EPSS)Not includedNot includedIncluded
      Ticket sync (Jira, ServiceNow, GitHub)Not includedNot includedIncluded
      Registrar takedown requestsNot includedNot includedIncluded
      MSP multi-tenant dashboardsNot includedNot includedIncluded
      FAQ

      Questions, answered.

      Is the scan free, and do I need an account?
      Yes, it is free, and no account is needed. You only share an email if you want the full report.
      Is my scan public?
      No. Your results are fetched with a random link only your browser has. We never list or publish the domains people scan, and the page never receives the names behind a finding.
      Why does the full report only go to an inbox at my domain?
      Because it names people and accounts. Sending it only to an address at the scanned domain means nobody can pull a report on a company they do not belong to.
      Can I scan a domain I do not own?
      The snapshot, yes: it is built from public records anyone can read. The full report needs an inbox at that domain, and monitoring needs the domain verified.
      Do you install anything or log into my systems?
      No. The scan is passive: no agents, no credentials, no sign-in attempts and nothing sent to your staff. We only read what is already public.
      Do you ever see or store our passwords?
      Never. Credential exposure is recorded as presence only, that an account appeared in a breach or infostealer log, never the password itself.
      How is this different from an attack-surface scanner?
      Attack-surface tools stop at a list of findings. HRS Exposure ties each finding to a person and folds it into HumanRisk Shield, with scoring, training and remediation, so the risk actually goes down.
      Get ahead of it

      See your exposure in 30 seconds.

      Then fix the first things before anyone uses them, and keep watching with HRS Exposure.

      Run free scan Schedule a demo
      Free · No sign-up · Public sources only