Securing more of your attack surface through domain discovery

Earlier this year we released our subdomain discovery feature, which allows you to identify subdomains of your existing domains so you can choose whether they should be added as targets and scanned, or potentially taken offline. This feature is fantastic for drilling into your existing target base, but it can't find new domains.

We've expanded on this to now include domain discovery, which will run every time you add a new apex domain to the portal. In the diagram below, we use intruder.io as an example of an apex domain. With domain discovery, we would expect to find domains such as intrudercareers.io rather than just subdomains such as careers.intruder.io.

To explore our expanded attack surface discovery feature set, head over to portal.intruder.io/targets/discovery.

Intruder's attack surface management features are only available on the Premium plan. If you'd like to trial this plan, please reach out to the team here.

If you’d like to discuss this feature with a member of the product team, or give some feedback, you can do so here.