Overview
Real-time attack surface intelligence
Domains
—
Subdomains
—
Active Scans
—
Monitors
—
AI usage
Loading AI usage…
Recent Monitor Changes
Loading…
Scans
Active and recent scan history
Loading…
Recently discovered assets (last 7 days)
| Asset | Root | Live | URL | Discovered |
|---|---|---|---|---|
| Loading… | ||||
Scan results
Loading…
Domains
Click a domain to browse its subdomains
Loading…
Subdomains
All discovered subdomains across every domain
Loading…
Platforms
Pull in-scope root domains from HackerOne, Bugcrowd, YesWeHack, Intigriti & Immunefi — or a domain's subdomains from Chaos.
Chaos Subdomains
Pull a root domain's known subdomains from ProjectDiscovery's Chaos dataset — instant, no full recon. Uses
CHAOS_API_KEY.
Programs
Bug bounty program monitor across platforms
Loading programs…
Program Lookup
Find the program for a keyword or domain — your accounts (bounty + vulnerability-disclosure) + public aggregator
Search a keyword or domain to find its bug-bounty program
CVE Radar
Every CVE the radar tracks, and the PoC-day race: public PoC → template (official, PR or AI-written) → targeted pass on the hosts running the product
0 CVE(s) tracked · auto-refreshes every 60s
| CVE | Severity | Vector | PoC | Template | PoC-day | Ran before | Seen | Description |
|---|---|---|---|---|---|---|---|---|
| Loading… | ||||||||
Findings
Loading findings…
Port Surface
Open ports across the corpus — unlocks network/appliance CVEs (NetScaler, WinBox, consoles)
0 open port(s) recorded
| Host | Port | Protocol | First seen | Last seen |
|---|---|---|---|---|
| No port data yet — run a port-surface scan (top-100 ports over all live hosts). | ||||
Credentials
Program test-credential pools across your accounts — claim status, daily auto-claim, reveal
Loading credentials…
New chat
Runs bash in the AutoAR container, drives the platform tools (scans, findings, settings, monitors), reads skill guides and can post to Discord. Every turn is saved.
Keyhacks
API key validation templates and usage guides
Loading…
Monitor
URL and subdomain change detection
Registers the target in the database. When “Start checking now” is on, marks it running and wakes the URL monitor worker (same as CLI
monitor updates add + start).Enter a target domain. The server probes common release/changelog/blog paths, then ranks pages with the configured AI provider (or heuristics if no API key). Select rows and add them as URL monitors.
Loading…
Adds a subdomain watch target and optionally starts the subdomain monitor daemon (same idea as CLI
monitor subdomains manage add + start).Loading…
Polls the hunter's public HackerOne profile and hacktivity feed. Sends a Discord alert (via the monitor webhook) when a new report resolves or reputation increases.
Loading…
Loading…
R2 Storage
Browse Cloudflare R2 bucket:
/
Folders
root
Files
Loading…
Settings
Connection status and configuration
Loading…
Report Templates
Manage and generate report templates
Loading…