Beta
Sign in
RECONNAISSANCE, CONNECTED

Your attack
surface.
In focus.

Map an authorized wildcard scope in one scan, or use focused tools for a single hostname. Start with the scope you have permission to assess.

Start your 1-day trialSee how it works

1-day trial · Card required · Cancel before billing

FROM FIRST LOOK TO FOLLOW-UP
Domains & hosts
Web services
JavaScript & APIs
Findings & evidence
LESS FRICTION. MORE CONTEXT.

Follow the surface.
Find your next move.

Built for researchers and operators who want to spend more time investigating, with their targets and evidence in reach.

example.testEXAMPLE
ASSET INVENTORY

A surface you can explore.

api.example.testHTTPS · 443
app.example.testHTTPS · 443
docs.example.testHTTPS · 443

Your workspace. Your investigation.

ONE SHOT · WILDCARD ATTACK SURFACE SCAN

One domain.
A connected investigation.

Start a combined scan of your authorized wildcard scope. Follow the collected evidence from discovered hosts to the checks that deserve your attention.

01

Discover hosts

Collect in-scope names from public certificate sources, then resolve DNS records.

02

Map web services

Probe supported HTTP and HTTPS ports and collect status, titles, server and technology clues.

03

Collect URLs and paths

Bring together reachable and archived routes, JavaScript assets and API-related paths.

04

Inspect JavaScript

Analyze collected scripts for endpoint references, parameters, secret signals and static sink candidates.

05

Check exposure signals

Run bounded checks for common exposures, debug configuration, sensitive files and takeover fingerprints.

06

Review and return

Explore saved results by category, follow their evidence and compare available collections.

Bounded collection, saved results and clear partial-coverage states. Findings need verification.

See exactly what is covered
YOUR NEXT QUESTION STARTS HERE

A focused tool.
A clearer picture.

No wildcard scope? Start with one authorized hostname. Use focused tools for its web services, URLs and DNS records, with a separate saved result for each check.

9 FOCUSED TOOLS
TECH STACK

Meet the stack
behind the site.

Identify technologies and reported versions, then review DNS, TLS and response protections in one website overview.

Explore the toolkit
Network & cloudSubdomain FinderNetwork & cloudDNS MapNetwork & cloudDomain FinderWeb reconURL FuzzerWeb reconWAF DetectorNetwork & cloudVirtual Host FinderNetwork & cloudPort ScannerWeb reconGoogle Dorks

Exact-host tools need no wildcard scan first. Subdomain Finder and Virtual Host Finder require wildcard scope. Availability and limits are shown in your workspace.

KEEP THE THREAD OF YOUR INVESTIGATION

More context.
Less starting over.

Your target is more than its latest scan. Keep available collections, asset records, and finding history together, so your next review starts with what you already know.

Explore current coverage
AI REVIEW · INCLUDED WITH PAID FULL ACCESS

Collected code.
A reason to look closer.

Turn selected JavaScript sink contexts and saved findings into a private review. See the evidence, why it matters and what still needs verification. Leave a review running and return to the saved report.

Explore AI review

Evidence you can follow.

Source context. Clear reasons. Visible coverage.

  • Selected code locations and review rationale
  • Saved reports available for 30 days
  • Daily and monthly allowances shown in your workspace
Paid membership only. Not included in the trial. AI suggestions need human verification.
ONE MEMBERSHIP. ROOM TO INVESTIGATE.

Make it your
workspace.

Start with a 1-day trial. Keep your authorized targets, collections, and evidence in one place.

A workspace of your ownOne member account, across your devices.
History you can return toSaved target collections and evidence.
You stay in controlManage your membership and cancel in your account.

Misconfig.ai is a beta workspace. Coverage, speed, and the workspace are still being improved.

Full AccessINDIVIDUAL
$26/ month

Billed monthly after your trial

  • Private target and evidence history
  • Wildcard scans and focused tools
  • AI review on paid membership (usage limits apply)
  • Scan capacity capped per member
  • Membership management in your account
Start your 1-day trial

One 1-day trial per member. A card is required. AI review is excluded from the trial. Cancel before the trial ends to avoid the charge.

Subscription terms
A LITTLE MORE CONTEXT

Before you
get started.

What can I use today?

Run a combined wildcard scan or one of nine focused tools, then explore saved hosts, services, URLs, JavaScript and exposure checks. Paid Full Access also includes bounded AI review of JavaScript contexts and saved findings.

Do I need wildcard scope?

Only for a broad target scan or tools that discover multiple hosts. Supported individual tools work on one authorized hostname and exclude its descendants. No full scan is required first. Check the Tools page for current availability.

How does the trial work?

Eligible new members can start one 1-day trial after verifying their email and adding a payment card. Cancel before the trial ends to avoid the charge. AI review is not included in the trial. An account alone does not grant scan access.

Is this a team subscription?

This is an individual SaaS membership with no seat sharing. Shared team seats or a company license are not included. You can sign in to your own account on multiple devices.

Does adding a target start a scan?

No. Adding a target records the scope you are authorized to assess. You choose when to start a collection from the target workspace. Only assess assets you have permission to test.

How do I cancel?

Manage your subscription in Account & billing. Cancel during your trial to avoid the charge; paid membership access lasts until the end of the paid period. GK Data LLC operates the service.

SEE WHAT COMES INTO FOCUS

One surface.
Your next discovery.

Start your 1-day trial

For the targets you are authorized to assess.

misconfig.ai