Free for everyone. Funded by the people it helps.

There is no paid tier, no locked report and no sales call. Create an account, audit a domain you're authorized to assess, and take the whole report with you. If it saved you time or money, support the project so the next person gets the same.

Free with any account
  • ·Full-depth external audit of any domain you're authorized to assess
  • ·Brand impersonation and lookalike domains with screenshot evidence
  • ·Credential and identity exposure from breach corpora
  • ·Perimeter, cloud and certificate intelligence
  • ·Source-code exposure and indexed-data discovery
  • ·Framework alignment, exposure graph and the remediation playbook
  • ·HTML and PDF report exports

Fair use: 1 audit per week and 4 per 30 days per account, one audit per domain per day. These caps exist to keep lookup costs survivable, not to sell an upgrade.

Supporter perk
  • ·Weekly change checks and a full monthly re-audit
  • ·Change detection between runs, with email alerts
  • ·Exposure trends over time
  • ·Up to 3 domains under continuous coverage

Continuous coverage runs on a schedule, so it costs money every week it's on. Any contribution enables it for a year; monthly support keeps rolling it forward.

Support the project

External Recon is free. Contributions keep it running.

Every audit costs real money in third-party lookups and compute. If the report was useful, chip in what it was worth to you. Supporters also unlock continuous coverage — scheduled re-scans, change detection and trends — for a year.

One-time

Monthly

Contributions are voluntary and not required to use any scanning, reporting or export feature. Monthly support can be cancelled at any time from your account page.

Where the money goes

Breach-corpus and infrastructure intelligence lookups, page rendering and screenshot capture, AI analysis of suspicious pages, hosting, and the scheduled re-scans that supporters rely on. Nothing else.