DNS & attack surface
No public development or admin hosts
DNS hygiene, subdomains, takeover risks and domain registration.
Why it matters
Development, staging and admin systems are typically less patched and protected than production, and often contain real data - a common entry point.
How to fix it
Moderate · a few hours- Put these hosts behind a VPN, SSO or an IP allowlist.
- Remove public DNS records of hosts that are no longer used.
Test this now, free: Subdomain finder - no sign-up.
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free