Attack surface discovery (ASD)
IP-based attack surface tools only find what you already know. ONYPHE's ASD takes a domain-first approach: start with a domain, subnet, or ASN and we derive the full picture of associated FQDNs and exposed assets from our database of 8 billion FQDNs and 470 million known domains. Four years of history. Your organisation, your supply chain, your M&A targets.
Compare plans
eagle view
(starter)
Griffin View
(unlimited)
Griffin View
ASM Edition
Results/month *
100,000,000 *
Unlimited *
Unlimited *
Historical data
7 MONTH
Up to 48 MONTH
Up to 48 MONTH
Enterprise categories & filters
VULNSCAN category
RISKSCAN category
CTISCAN category
EXPORT & DISCOVERY APIs
OQLv2
Customizable dashboards
Ondemand Scan APIs
* All ONYPHE Views are subject to a rate limit of an average of 1 request per second, contact us for Unrated API option;
Trusted by Governments and Security Teams
For organisations that take their Internet exposure seriously
Know what's exposed
Act before it matters
Most organisations discover exposed assets after the fact. ONYPHE's ASD gives you an attacker's view of your entire footprint, derived from domain names rather than IP lists, so you find the exposure you didn't know to look for.
See Beyond Your Own Perimeter
ONYPHE ASD data lets you map Internet exposure across your organisation, your supply chain, and anyone else that matters to your risk picture.
Your organisation and everyone connected to it
Most ASD tools only find what you point them at. ONYPHE scans the entire Internet, so you discover the assets you didn't know to look for.
IP-based ASM is obsolete
Identifying assets by IP address alone misses too much. ONYPHE binds every asset to a domain name, so you can pivot across an organisation's full infrastructure and surface exposure that IP-based approaches simply wouldn't find.
Build your inventory your way
Your asset inventory can be as simple as a single domain name or as comprehensive as thousands of domains, subject organisation fields, subnets, and ASNs. ONYPHE derives the full list of associated FQDNs and IP addresses from that inventory, so you're always working from a current, accurate picture without maintaining exhaustive lists by hand.
Stay on top of what's exposed
Once your inventory is defined, ONYPHE does the hard work. Query our API hourly to catch new findings as they emerge, or let ASM Edition stream alerts directly to your environment. Refreshing the inventory itself is a light-touch operation: most teams revisit it annually, making it a low-overhead addition to any security programme.
About ONYPHE's ASD
What security teams ask most about ONYPHE's Attack Surface Discovery data.
Onyphe takes a unique approach by scanning the entire Internet and Dark Web in a net-neutral manner since 2017. Unlike competitors that only show you what they choose to display, we scan every exposed asset—including ones you didn't know existed. Our domain-name-based approach is more effective than traditional IP-only methods, helping you discover hidden risks before cybercriminals do.
Our solution is specifically designed to cut ransomware exposure up-front by identifying the initial access vectors attackers use: exposed RDP/VNC services, vulnerable VPN servers, and critical exploits waiting to be leveraged. By continuously monitoring your digital footprint in real-time, we alert you to vulnerabilities before they can be exploited—saving you from the millions of euros typically spent on breach recovery.
We take ethical internet scanning seriously. Our founder and CTO presented our "10 Commandments for Ethical Internet Scanning" at the Cyber Threat Intelligence Summit 2022. We:
✓ Publish transparent web server explanations for all probes
✓ Provide opt-out email addresses for removal requests
✓ Use fixed IP addresses (not disposable ones)
✓ Scan slowly to avoid stressing networks
✓ Honor data removal requests promptly
We operate with full transparency and respect for network owners worldwide.
Yes! For organizations with specific requirements, we provide:
✓ Unrated API options for high-volume needs
✓ Customizable dashboards tailored to your team's workflows
✓ Dedicated account management and priority support
✓ Volume discounts for annual commitments
✓ White-label solutions for service providers