Subdomain Vulnerability Assessment

Performs exhaustive subdomain enumeration using free DNS and certificate transparency logs, then analyzes for misconfigurations, exposed sensitive files, or outdated endpoints to identify security ris

Try it

Use cases

• a security team scans their company's subdomains to identify misconfigurations before a breach.
• devops teams verify that old or exposed endpoints are properly deprecated and not reachable.
• penetration testers use the api to map out potential attack vectors across client subdomains.

Payment methods

Every endpoint supports three payment methods:

• x402 — pay per call with USDC on Base. No signup needed.
• MPP — Stripe Machine Payments Protocol. Cards + stablecoins.
• API key — traditional auth. Sign up and buy credits.

MCP integration

Adds all APIMesh tools to Claude, Cursor, Windsurf, or any MCP client.