Free cybersecurity scans for your domain
Start with your domain and see what attackers already can. Each free scan is powered by the ScruteX CTEM platform — no credit card, first findings in about 10 minutes.
Dark Web Exposure Check
Find out what of your organisation is already exposed on the dark web — leaked credentials, stolen sessions, and breached data — in about 10 minutes. No credit card required.
Run the dark web exposure check→Free ToolAttack Surface Scan
Discover every internet-facing asset an attacker can see — subdomains, open ports, expired certificates, and exposed services — with a free external attack surface scan.
Run the attack surface scan→Free ToolBrand Protection Scan
See who is impersonating your brand — lookalike domains, fake social profiles, and rogue apps set up to phish your customers — with a free brand protection scan.
Run the brand protection scan→How the free scans work
Every free tool runs the same detection engine that powers the ScruteX CTEM platform. The scans are passive and external — they analyse what is already publicly visible about your organisation, so there is nothing to install and nothing that can disrupt your infrastructure.
Enter your domain
Start with your organisation's primary domain and sign up with a work email. No credit card, no sales call, and no agents to deploy.
We scan public and dark web sources
The engine sweeps passive DNS, certificate transparency logs, breach databases, dark web marketplaces, domain registrations, app stores, and social platforms for anything tied to your domain.
Review your findings
First findings land in your private workspace in about 10 minutes: exposed assets, leaked credentials, or impersonation attempts, each with the evidence behind it.
Why start with a free exposure scan?
Attackers do not wait for an invitation. Before any intrusion, they map your external attack surface, search breach dumps for your employees' credentials, and register lookalike domains to impersonate your brand. A free scan shows you the same picture they see — the forgotten subdomains, the credentials already circulating on dark web markets, and the copycat domains and profiles targeting your customers.
Each tool focuses on one question. The dark web exposure check answers “what of ours has already leaked?” — leaked passwords, stolen browser sessions, and breached records tied to your domain. The attack surface scan answers “what can attackers reach?” — internet-facing assets, open ports, expiring certificates, and dangling subdomains. And the brand protection scan answers “who is pretending to be us?” — typosquatted domains, fake social profiles, and rogue mobile apps.
The results are the starting point for a continuous threat exposure management (CTEM) programme: once you know what is exposed today, the ScruteX platform keeps watching so you find out about tomorrow's exposure before attackers do.
Free scan tools — FAQ
Are the ScruteX free scan tools really free?+
Yes. Each free scan is a genuine, point-in-time run of the corresponding ScruteX platform module against your domain. There is no credit card, no trial countdown, and no obligation — you sign up with a work email and get your first findings in about 10 minutes.
What do I need to run a free cybersecurity scan?+
Just your organisation's primary domain and a work email address. The scans are entirely passive and external — they look at what is already publicly visible or already leaked, so you don't need to install agents, change DNS, or verify ownership to see initial results.
Is the free scan safe to run against my domain?+
Yes. The free tools use non-intrusive, read-only techniques: passive DNS and certificate transparency for attack surface discovery, breach and dark web dataset lookups for exposure, and public registration and app store data for brand checks. Nothing is exploited, and no traffic that could disrupt your services is generated.
How is the free scan different from the full ScruteX platform?+
The free tools give you a one-off snapshot of a single module. The full platform monitors continuously across all modules — attack surface, dark web and data exposure, brand protection, third-party risk, and threat intelligence — with alerting, ticketing integrations, and remediation workflows on top.
Who can see my scan results?+
Only you. Results are generated in your own private workspace on the ScruteX platform and are never shared, published, or used for outreach to third parties.
Want all of it, continuously?
The free scans are point-in-time snapshots. The ScruteX platform monitors your exposure around the clock across every module.
Free tier. No credit card. First findings in about 10 minutes.