Why does "Subdomain risk scanner" appear in ExposureGrid?

Scanners observe externally visible signals. A finding means our rules matched - validate severity and applicability in your environment.

Could this be a false positive?

Yes, depending on context and coverage limits. Especially for heuristic, partial, or pattern-based checks, corroborate with manual review.

Re-run a scan to confirm the external signal changed, then enable monitoring where your plan supports it.

Free external scan tool: Subdomain risk scanner. Start from your domain using the same public scan flow - no duplicate submission logic.

Run an external scan to see how this area shows up for your hostname on your current plan.

Automated checks scale better than one-off manual spot tests and help catch drift after deploys.

Submit your domain in the scan form above the fold; review only visible findings for your token/account.

Interpret results as signals, then follow the linked fix guides for any issue families you need to address.

Run a scan to verify this fix on your domain

Use the same public scanner as the homepage — results honor your plan tier.

ExposureGrid performs outside-in checks without requiring an origin agent.

Scan your domain

Run a private scan from the edge — same public flow as the homepage free scanner, with plan-appropriate coverage on the results side.

Why does "Subdomain risk scanner" appear in ExposureGrid?: Scanners observe externally visible signals. A finding means our rules matched - validate severity and applicability in your environment.
Could this be a false positive?: Yes, depending on context and coverage limits. Especially for heuristic, partial, or pattern-based checks, corroborate with manual review.
What should I do after changing configuration?: Re-run a scan to confirm the external signal changed, then enable monitoring where your plan supports it.

ExposureGrid continuously monitors these issues and alerts you before they become exploitable.

Scan your domain

Compare plans