The suite

Offensive tooling that skips the busywork.

Each tool works on data you are already authorised to hold, gates its heavy features behind Pro, and shares one account and one subscription.

Attack Surface

Passive subdomain and asset discovery with change detection.

Turn a BloodHound export into ranked attack paths and a client-ready report.

Build targeted credential wordlists from a roster you already have.

Decode a JSON Web Token and flag security issues and weak secrets.

Find subdomains with dangling DNS pointing at unclaimed cloud services.

Scan a target's JavaScript and assets for leaked API keys and credentials.

Pull hidden API endpoints and paths out of a target's JavaScript.

Catch blind XSS and out-of-band interactions with alerting callback URLs.