Nothing to show yet

Add your first domain or IP range. We start a passive scan right away and fill this view within minutes.

ERROR 503 · index-query timed out

This view could not be loaded

The query service did not answer in time. Your data is safe. Try again, or check the status page if this keeps happening.

No permission

Your role can't open this area. Ask an admin of your organisation for access.

{{ routePath }}

{{ k.label }}

Security rating

{{ gauge.band }}

30 days{{ gauge.delta }}

Risk by vector{{ donutTotal }} findings

No findings yet. Verify a domain on the Scans page and run your first scan.

Latest alerts

No alerts yet.

Top exposed assets

{{ routePath }}

Search the index

›

{{ sx.k }}{{ sx.v }}

On-demand check · {{ odHost }}

{{ odPorts }}

{{ odCounts }}

Facets

Saved searches · this session

No saved searches yet. Run a query and click ☆ Save search.

No hosts match this query

Try a port, product, CVE or a whole device class — or type a domain/IP for a live check. e.g. category:ics · product:nginx has_vuln:true · cve:CVE-2021-44228

{{ h.cc }}{{ h.org }}{{ h.asn }}

Last seen {{ h.seenL }}

{{ h.banner }}

{{ mapNote }}

{{ routePath }}

Org {{ host.org }}ASN {{ host.asn }}Geo {{ host.geo }}Last seen {{ host.seenL }}

Ports & services{{ host.nPorts }}

{{ p.banner }}

Vulnerabilities

History

No observations recorded yet.

TLS / certificate{{ tls.status }}

▲ {{ w }}

DNS · WHOIS · attribution

Linked domains

{{ routePath }}

Attribution graph

{{ routePath }}

Monitored assets

Exposure Monitor

Everything you expose to the internet — and what changed

Passive watch starts immediately, no verification needed: our daily non-intrusive crawl of your public IPs and ranges, certificate-transparency logs, certificate expiry and DNS / e-mail protection. Verified domains additionally get active scans of the 1,000 most common ports, version-based CVEs and the security rating.

{{ k.k }}

Exposed services

No assets watched yet. Add a public IP, range or domain — first results arrive with the next daily sweep (usually within minutes for small scopes).

{{ a.asset }}{{ a.mode }}

Changes · last 30 days{{ exObs }}

No changes detected yet. Every new or closed port and every new subdomain shows up here — and triggers your alert rules.

{{ e.sub }}

{{ cd.k }}

{{ cd.v }}

{{ routePath }}

Alerts

No alert rules yet.

{{ ru.cond }}

→ {{ ru.ch }}

Channels are configured per alert rule. Every destination your rules deliver to is listed here; Send test delivers a test alert through the rule that uses it.

Email{{ chEmailN }}

No email destinations yet.

{{ ch.val }}

Webhook{{ chHookN }}

No webhook destinations yet.

{{ ch.val }}

Slack{{ chSlackN }}

No slack destinations yet.

{{ ch.val }}

{{ routePath }}

Get verified

Earn the athorion Cybersecurity Verified seal: verify your domain, let us scan it, fix what we find. Essential from 70 · Silver from 80 · Platinum from 90 points.

{{ st.no }} {{ st.mark }}

2 · Verify your domain

We only scan what you prove you own. Add a DNS TXT record (or a file on your website) — it takes two minutes and covers all subdomains.

✓ Verified: {{ jVerifiedList }}

{{ o.value }}pending

DNS TXT record — name

value

Or serve the value as a file at {{ o.fileUrl }}

3 · First scan

Non-intrusive: open services, TLS, web hardening and known vulnerabilities from disclosed versions. We add the domain to weekly monitoring.

{{ d.value }}

{{ j.target }}{{ j.status }} · {{ j.when }}

4 · Fix & reach 70

{{ jScore }}/ 100 · {{ jScoreNote }}

708090

{{ f.ref }}

After a fix, press Re-check: the host is scanned again and the rating updates about a minute after the scan. Full details and evidence are on the Vulnerabilities and Reports pages.

5 · Seal plan

6 · Display your seal

Embed code

{{ jSumTag }}

{{ tr.label }} · {{ tr.at }}

{{ routePath }}

Pen-Test AI · TIER 3

Our local cyber-security LLM runs a complete non-intrusive assessment and checks whether known exploits could apply — no payloads, no exploitation. Watch it work live.

⚠

Active exploit confirmation runs only on domains you have verified ownership of. Any other target gets deep analysis and exploit-applicability assessment only. You are responsible for using this against systems you are authorised to test.

New pen-test

target

Pen-tests

No pen-tests yet. Enter a target above to run the first one.

Live · {{ ptDetailTarget }}{{ ptDetailStatus }}

Select or start a pen-test to watch the analyst work.

{{ ptRisk }}/ 100 risk · {{ ptFindingN }} findings

↻ {{ ptDiffText }}

Attack path

{{ s.from }} → {{ s.to }}

{{ f.prio }}{{ f.sev }}NEW{{ f.title }}{{ f.cve }}KEVEPSS {{ f.epss }}

{{ f.mitre }}

Exploitability: {{ f.exploit }}

Attack path: {{ f.apath }}

Fix: {{ f.fix }}

{{ routePath }}

Security rating

{{ gauge.band }}

{{ tl.label }} · {{ tl.at }}

Rating history Your rating · 0–100

No rating history yet — verify a domain and run your first scan to get a rating.

{{ ax }}

NOT YET
VERIFIED

Athorion Verified

Embed on your website

Verify page →

Risk vectorsscore (100 = best) · findings

No risk vector scores yet — verify a domain and run your first scan to get a rating.

What lowers your score

{{ lw.a }}

No critical or high findings. Nothing is pulling your score down right now.

{{ routePath }}

Vulnerabilities

EPSS ≥ {{ vEpssL }}

CVEs are matched from observed product versions. A version-based match may be a false positive if the vendor back-ported a fix without changing the version string.

{{ routePath }}

Authorized scans

TIER 2Active scans go deeper than the passive index. They run only against scope whose ownership you have verified, only inside an approved authorization, and only with non-intrusive checks (port, TLS and HTTP observation).

Ownership{{ ownCount }}

No ownership proofs yet. Active scans only run against scope you have proven you control. Add your domain above to get DNS or file instructions; IP ranges are reviewed by an Athorion operator.

Last check · {{ o.err }}

Type{{ o.dnsType }}

Name{{ o.dnsName }}

Value{{ o.dnsValue }}

Add this TXT record at your DNS provider, then click Check now. DNS changes can take a few minutes to propagate.

URL{{ o.httpUrl }}

Content{{ o.httpContent }}

Serve exactly this text (plain text) at the URL, then click Check now.

Scope authorizations

{{ routePath }}

Reports

Scheduled

No scheduled reports yet. Scheduled reports are e-mailed as PDF to the recipients you add.

{{ sd.when }}

→ {{ sd.to }}

{{ sd.next }} · {{ sd.last }}

{{ routePath }}

API & tokens

API docs →

{{ u.k }}

{{ u.v }}/ {{ u.max }}

Quick start

{{ snippet }}

{{ routePath }}

Settings

Profile

Name Email

Plan & usage{{ planName }}

Need higher limits? Contact us to upgrade. Enterprise plans are unlimited.

Organisation

Organisation name

Only account admins can rename the organisation.

Team{{ teamCount }}

{{ tu.email }} · you

{{ tu.role }} · {{ tu.statusL }}

Only account admins can invite or manage members.

{{ routePath }}

Platform overview

Updated 4 s ago

{{ k.label }}

System health

{{ sv.name }}

{{ sv.st }}

Throughput · 24 h— jobs/s— findings/s

Redpanda consumer lag{{ lagNow }}

Recent audit events

{{ routePath }}

Accounts & users

{{ routePath }}

Plan {{ acct.plan }}Status ● {{ acct.status }}Contact {{ acct.user }} · {{ acct.email }}Created {{ acct.created }}

Seal

{{ k.label }}

{{ u.k }}

{{ u.v }}/ {{ u.max }}

{{ routePath }}

Global Internet Scanner

Internet · Attack surface · Open ports · Infrastructure intelligence

Scanner cluster online

{{ scanWorkers }}

{{ k.sub }}

Scan campaigns

Scan throughputlive · rolling

{{ t }}

Current

Peak

{{ peakThr }} /min

Average

{{ avgThr }} /min

Global scan activity{{ scanScopeLabel }}

{{ m.k }}

Live discoveries · open ports{{ liveState }}

TimeIP addressPortInfo

                        {{ d.time }}
                        {{ d.ip }}
                        {{ d.port }} tcp
                        {{ d.info }}
                      

Top portsmost exposed

#Port · serviceHostsShare

                        {{ c.rank }}
                        {{ c.country }}
                        {{ c.hosts }}
                        {{ c.pct }}
                      

IoT & OT exposure{{ iotHosts }} hosts

No IoT/OT services observed in scope yet.

                        {{ d.service }}{{ d.port }} · {{ d.catL }}
                        {{ d.hosts }}

Recent findings

TimeSevFinding

                        {{ f.time }}
                        {{ f.sev }}
                        {{ f.finding }}{{ f.ip }}
                      

{{ routePath }}

Blocklist & abuse

Abuse inbox · opt-out requests{{ abuseOpen }}

{{ ab.org }}● {{ ab.status }}

{{ ab.cidr }} · {{ ab.from }}

Scan identity · served at /v1/scan/identity

Abuse contact Scanner description Opt-out text

{{ idn.json }}

{{ routePath }}

Tier 2 authorizations

{{ routePath }}

Data & index

{{ k.label }}

Open ports · distribution

{{ pd.p }}{{ pd.n }}

Freshness · last seen by hourdarker = staler

0006121823

ClickHouse volume · 12 months4.81 TB

Audit log

Impersonation

{{ routePath }}

Plans & quota

Public pricing →

{{ pl.n }}

Usage vs. limit

{{ routePath }}

Console settings

Owners & admins

Platform defaults & governance

{{ greetH }}

Search the index

{{ host.ip }}

Attribution graph

Monitored assets

Alerts

Get verified

Pen-Test AI · TIER 3

Security rating

Vulnerabilities

Authorized scans

Reports

API & tokens

Settings

Platform overview

Accounts & users

{{ acct.org }}

Global Internet Scanner

Blocklist & abuse

Tier 2 authorizations

Data & index

Audit log

Plans & quota

Console settings