Threats targeting your platform footprint
Identify external threat activity around the platforms, providers and vendors visible from your domain's public records.
Reports
See the threats and defense gaps around your domains — including the ones you don't know you own.
Start free on a single domain. The Organization estate report then walks certificate, mail and registration relationships to find the rest of your estate — and shows you the risk that only appears when you look across it.
Free single-domain report
Threat exposure and DNS defense analysis
A practical report showing external threat context, DNS defense weaknesses and remediation priorities for one domain.
What it contains
Threat exposure
DNS records
Email posture
Platforms
Vendors
Certificates
Infrastructure
Remediation
Report value
External threat exposure and DNS defense gaps, in one report.
The free report is not just a posture snapshot. It connects the platforms visible around one domain with threat activity targeting those platforms, then identifies the DNS and email weaknesses that affect defense and remediation priorities.
Detailed DNS defense analysis
We check the baseline controls every domain should enforce (SPF and DMARC). We show where the advanced and gold-standard layers (MTA-STS, TLS reporting, CAA, DNSSEC, BIMI) are available to you, as a maturity path, not a list of failures. DKIM can't be tested from outside, so it is not scored.
Remediation priorities
Translate findings into clear actions, likely owners and practical remediation effort so teams know what to fix first.
The free report covers one domain. Most organizations own more than they think — that's the first thing the Organization estate report shows you.
Organization estate report
You've seen what one domain looks like. This is what the estate looks like.
Declared
The domains you told us about
Strongly associated
High-confidence: you own these
Possible
Medium-confidence: review these
Defensive
Consider recovering or monitoring
Estate discovery
You declare the domains you know. Discovery walks certificate, mail and registration relationships to evidence the ones you don't — sorted into four confidence tiers (declared, strongly associated, possible, defensive) with the connection shown for every domain. No guesses; every finding carries its evidence.
Systemic risk
Some risk only exists across domains: how much of the estate depends on one provider (weighted by who that provider is — a majority on a hyperscale platform is a different risk from the same share on a commodity registrar), which weaknesses repeat across segments, which acquisitions sit below the group standard, and what expires next. The Organization estate report is built to show exactly this layer.
Sample reports
View the anatomy in a few seconds.
Rather than explain how reports are produced, the samples show what a recipient actually sees: the summary, findings, evidence and next actions.
Sample report
Sample free exposure snapshot
A sample one-domain report showing threat exposure around visible platforms, DNS defense gaps and first remediation priorities.
Platform exposureEmail control maturityDNS postureWhat to fix first
Open sample →
Sample report
Sample Organization estate report
A six-page assessment across a whole estate, opened by discovery — the domains you declared, plus the ones we found and can evidence — and closed by a worksheet your IT team can execute.
Estate discoveryConcentration & posture varianceException registerRemediation worksheet
Open sample →
What the report contains
Threat context, DNS analysis and remediation priorities.
The value is in the contents: what is exposed, what is weak, what is being targeted and what should be fixed first.
Single domain
Domain infrastructure report
Platform-led threat exposure
Which visible platforms and providers are being used as lures, and which suspicious domains, certificates or DNS patterns are relevant to them?
Platform luresVendor footprintBrand termsCertificatesDNS changesEvidence
DNS and email defense analysis
Which DNS and email records create spoofing, trust, routing or configuration weaknesses that should be fixed?
Baseline: SPF · DMARCAdvanced: MTA-STS · TLS reportingGold standard: CAA · DNSSEC · BIMIMX providers
Platform and vendor footprint
Which email platforms, cloud services, SaaS providers, CDNs, nameservers and hosting relationships are visible?
Email platformCloudCDNHostingNameserversSaaS signals
Subdomain and infrastructure view
Which public subdomains, CNAMEs, provider relationships and hosting patterns expose the operating footprint?
SubdomainsA/AAAACNAMEsHostingASNRelated infrastructure
Remediation effort and cost indicators
Which issues are high priority, who is likely to own them, and what level of effort should be expected?
Risk rankingEvidenceNext stepsOwnersEffort bandsMonitoring path
Technical remediation appendix
Current state, target state, paste-ready records, staged rollout.
Current stateTarget statePaste-ready recordsStaged rollout
Multi-domain
Organization estate report
Estate discovery
Declared, strongly associated, possible, defensive. Every discovered domain carries its connection evidence: a shared certificate, a mail route, a registration record.
Concentration & accumulation
The share of your estate on each provider, shown as it is, with its severity rated by the provider's resilience and exit friction. The biggest number is not always the biggest finding — the report says which is which.
Posture variance & correlated weakness
Which segments sit below the group standard, and what's wrong the same way everywhere. A weakness on one domain is a ticket; on half the estate it's a policy gap, and it gets fixed at policy level.
Operational calendar & exception register
What expires next, what's already lapsed, and a single prioritized list of what to act on, in order.
Remediation worksheet
An appendix your IT team executes: exact records per domain, staged where staging matters (DMARC before SPF hard-fail), grouped by the account that administers each zone so one team's work lands in one change window.
Report catalog
Start with one domain, then understand the estate.
The free report gives a useful single-domain analysis. Paid reports expand the scope to the domains an organization owns and expose recurring weaknesses, inconsistent controls and systemic risk.
Show prices inConverted prices are a guide at current exchange rates. We can invoice in your currency.
Free exposure snapshot
One domain. Platform-led threat exposure, detailed DNS defense analysis and first remediation priorities.
Single domain · paid
Domain infrastructure report
The full assessment of one domain — yours, a client's, a vendor's, an acquisition target's. An executive core any board can read: threat exposure, defense posture, and the evidence behind every claim. Plus a technical remediation appendix your engineers execute: every finding with current state, target state, and paste-ready records, staged in the order a change should actually land.
Multi-domain · paid
Organization estate report
The same assessment at estate scope, opened by discovery: the domains you declared, the ones we found and can evidence, and the systemic layer no single-domain report can show — concentration, posture variance, correlated weakness, the operational calendar — closed by a worksheet grouped by the team that administers each zone. Editions for investors, insurers (single risk and portfolio), MSSPs (white-label) and M&A due diligence.
Many organizations · paid
Portfolio report
Every organization in a portfolio graded across its registered domains, with a scorecard across them all, a PDF per company and CSV and JSON exports. Sold in three editions: for investors, for insurers' books, and for MSSPs under their own brand.
White-label · paid
MSSP Edition
The portfolio report for your clients, under your brand: your name, colors and contact on every page, and each finding mapped to a service you sell. Bought online, at the portfolio report's price.
From $995one-off, by client count
Buy under your brandSample findings
The report explains threat context, defense gaps and what to fix next.
A useful report should not simply list records. It should explain the external threat context, the defense weakness, the likely owner and the next action.
Platform threat exposure
Which platforms and vendors are visible, and is suspicious infrastructure appearing around those lures?
DNS defense gaps
Which baseline controls (SPF and DMARC) need enforcing first across the estate? Where are CAA and DNSSEC missing, and which subdomains are dangling?
Mail platform alignment
Does the public DNS footprint match the expected email platform and sender configuration?
Systemic portfolio risk
For paid reports, are the same weaknesses repeated across many domains, brands, subsidiaries or suppliers?
Remediation plan
What should be fixed first, who is likely to own it, and what level of effort or cost should be expected?
Discovery evidence
You declared 9 domains. Discovery evidenced 24 — including one expired acquisition name available for anyone to register.
Concentration weighting
64% of the estate sits on one commodity registrar with no transfer locks — while the 79% certificate-authority concentration is a config change to leave. The report ranks which concentration is the finding.
Where reports lead
A report should create the next security action.
The free report gives the single-domain baseline. Paid reports add estate-wide coverage, systemic risk analysis and recurring reporting across the domains an organization owns.
Alerts
Move priority brands, domains or platforms into live alerting for platform abuse, brand impersonation and suspicious infrastructure.
Estate monitoring
A report is the map on the day it runs. Under monitoring, discovery re-walks the estate every run — new domains join automatically, candidates queue for your confirmation, and the grade trend shows whether remediation is landing. The live feed covers what happens between runs.
Cloud data shares
Join report findings with analytical datasets for hunting, enrichment, trend analysis and marketplace delivery.
Partner services
Use reports as a customer-facing motion for MSSPs, ESPs, consultancies and managed-service providers.
Next step
View the sample, then get your own report.
The sample examples show the report anatomy. The free report applies the same structure to one domain using current Datazag intelligence.