SubdomainShadowPulse / report

SubdomainShadowPulse report: demo-saas.example

Demo report on a fictional sample site.

Try a live example in 1 click:

0 / 100

6 of 6 checks need attention (1 high priority).

  • ✗ No certificates expiring in the next 30 days (high): 3 hostnames have their latest certificate expiring within 30 days.
  • ✗ No lapsed hostnames to review (medium): 18 hostnames had certificates that lapsed over 30 days ago (possibly retired; check DNS no longer points at old services).
  • ✗ New hostnames in the last 30 days reviewed (low): 6 hostnames first appeared in the last 30 days.
  • ✗ Limited wildcard certificates (medium): 9 wildcard certificate entries.
  • ✗ Certificates from 3 or fewer issuers (low): Issuers: Let's Encrypt, Example CA, Other CA, Fourth CA.
  • ✗ Public hostname inventory under 200 (low): 240 unique hostnames in public certificates.

Markdown version

Fix it in minutes

Get copy-paste fixes for every failing check.

See options

Passive and informational: uses only public Certificate Transparency logs (crt.sh); no requests are sent to your hosts and nothing is probed or port-scanned. Public reports show counts only; the hostname list is available only to verified domain owners or agencies attesting authorization. Findings are review items, not confirmed vulnerabilities.

Often used together