Platform Overview
External Attack Surface Management and perimeter security intelligence for your organization.
RiskShelter gives your team a single place to discover and monitor every internet-facing asset tied to your domains: subdomains, open ports, web endpoints, cloud storage, and vulnerabilities, all updated continuously.
What it covers
Subdomains & DNS: automatic enumeration of active subdomains, DNS records (A, AAAA, CNAME, MX, TXT, NS), IP addresses, and CDN providers. Dangling CNAMEs that could be taken over are flagged automatically.
Port & Service Detection: fast TCP probing across discovered IPs to surface exposed ports and fingerprint running services.
Web Endpoints & Security Headers: crawls live routes, checks HTTP status codes, and grades each endpoint against the full set of defensive headers (CSP, HSTS, X-Frame-Options, and more).
S3 Cloud Storage Auditing: probes cloud storage resources linked to your domains for publicly readable or writable misconfigurations.
Vulnerability Management: correlates findings against known CVEs with CVSS v3.1 severity scores and maps them to SOC 2 and ISO 27001 controls.
How it works
Add a root domain → run a scan → review findings across the tabbed dashboard → configure recurring schedules → export a PDF report. That's the full loop.
See Quickstart Guide to get started, or Rules of Engagement for the mandatory authorization requirements before scanning.