External Attack Surface
Discovery Scanner
Automated reconnaissance delivering PCI DSS 11.3-ready findings, CIS Controls evidence, and OWASP misconfiguration reports in under 3 minutes.
$ nsi-scan example.com
Scanning target: example.com
Phase 1: Subdomain Discovery
Found 12 live subdomains
Phase 2: Port Scanning
+ 443/tcp - HTTPS (nginx)
+ 22/tcp - SSH (OpenSSH 8.2)
! 3306/tcp - MySQL (open)
Phase 3: Misconfiguration Check
[CRITICAL] Default creds: root@3306
[HIGH] /.env exposed
Scan complete in 2m 34s
Complete Attack Surface Visibility
Everything you need to discover, assess, and document your external attack surface for compliance and security teams.
Subdomain Discovery
Automatically discovers all subdomains via Certificate Transparency logs, DNS enumeration, and intelligent brute-forcing.
Port Scanning
Scans 100+ ports including common services, databases, and cloud infrastructure. Identifies exposed services instantly.
Auth Testing
Tests for default credentials on discovered services including MySQL, SSH, FTP, and admin panels.
Config Exposure
Detects exposed .env files, Git repos, backup files, and sensitive configuration that attackers could exploit.
IP Geolocation
Maps discovered infrastructure to physical locations, ISPs, and organizations for complete asset visibility.
Compliance Reports
Generate PDF reports mapped to PCI DSS, CIS Controls, and OWASP frameworks for auditors and compliance teams.
Audit-Ready Evidence
Every finding is mapped to industry compliance frameworks, making it easy to satisfy auditors and demonstrate security posture.
PCI DSS 11.3
External Penetration Testing
- 11.3.1 - Network-layer penetration tests
- 11.3.2 - Application-layer penetration tests
- 11.3.4 - Corrective action verification
CIS Controls
Critical Security Controls
- Control 1 - Hardware Asset Inventory
- Control 13 - Network Monitoring & Defense
- Control 4 - Secure Configuration
OWASP Top 10
2021 Web Application Security
- A01 - Broken Access Control
- A05 - Security Misconfiguration
- A07 - Identification & Auth Failures
Simple, Transparent Pricing
Start free, upgrade when you need full visibility. No hidden fees.
Free
Try our scanner with limited features
- Google sign-in required
- IP addresses & open ports only
- No service detection
- Watermarked reports
- 3 scans per month
- Results expire in 24 hours
- Service banners
- Auth testing
- Path discovery
- PDF export
Pro Monthly
2-month minimum, cancel anytime
- Full scan results
- Service detection & banners
- Default credential testing
- Path & config discovery
- Clean PDF reports
- Unlimited scans
- Permanent result storage
- Priority scan queue
Single Report
One complete scan & report
- Full scan results
- Service detection & banners
- Default credential testing
- Path & config discovery
- Clean PDF report
- Compliance mapping included
- No subscription required
Have questions? Contact us or check our FAQ.