Which registered OUI assignment matches this MAC address prefix?
Focused quick check · MAC / OUI
Developer compatibility
- Contract
lookup.mac.v1- Route
- POST /v2/lookups/mac
- Access
- free
- Profile compatibility
- Standalone
- Required configuration
- None
Questions and data sources
What can Tigess help you understand?
Start with the question you need to answer. Tigess shows the smallest available quick check or research path, its limits and the sources it can use.
Supported questions
Choose an outcome before choosing the machinery.
Unavailable and partial paths remain visibly limited; they are never presented as complete answers.
How can this phone number be normalized, and what region does its format suggest?
Focused quick check · Phone format and region
Developer compatibility
- Contract
lookup.phone.v1- Route
- POST /v2/lookups/phone
- Access
- free
- Profile compatibility
- Standalone
- Required configuration
- None
What bounded public context is available for this IP address?
Focused quick check · IP context
Developer compatibility
- Contract
lookup.ip.v1- Route
- POST /v2/lookups/ip
- Access
- free
- Profile compatibility
- Standalone
- Required configuration
- None
Which public DNS records and responses are visible for this domain?
Focused quick check · DNS
Developer compatibility
- Contract
lookup.dns.v1- Route
- POST /v2/lookups/dns
- Access
- free
- Profile compatibility
- Standalone
- Required configuration
- TIGESS_DNS_RESOLVERS
What core public naming and registration context supports this domain?
Focused quick check · Domain core
Developer compatibility
- Contract
lookup.domain.v1- Route
- POST /v2/lookups/domain
- Access
- authenticated
- Profile compatibility
- Quick
- Required configuration
- None
What do public mail-routing, authentication and transport records show?
Focused quick check · Mail security
Developer compatibility
- Contract
lookup.mail.v1- Route
- POST /v2/lookups/mail
- Access
- authenticated
- Profile compatibility
- Balanced
- Required configuration
- None
What do the public web surface, headers and TLS certificate show?
Focused quick check · Web and TLS posture
Developer compatibility
- Contract
lookup.web.v1- Route
- POST /v2/lookups/web
- Access
- authenticated
- Profile compatibility
- advanced_investigation
- Required configuration
- None
Which additional public entities and relationships can a bounded research run discover?
Deeper investigation · Multi-source investigation
Developer compatibility
- Contract
scan.v1- Route
- POST /v2/scans
- Access
- authenticated
- Profile compatibility
- Quick, Balanced, Deep Research, Advanced Investigation
- Required configuration
- None
Question groups
Explore the public context that could matter.
These groups organize compatible sources around an investigation question. Actual availability still depends on target type, configuration, permission and coverage.
How is a domain named, registered and resolved?
Domain and DNS
How is public email routing and authentication configured?
Mail security
What does a public website expose through headers, technology and certificates?
Web and TLS
Which public addresses, services and source-qualified risks are visible?
Network and security
Which public identity and account signals may refer to the same subject?
Identity and public profiles
Which organization and public-record context is relevant?
Companies and records
What can bounded local analysis extract from an authorized file?
Files and content
How do saved results connect, and which sources support a finding?
Analysis and delivery
Progressive detail
Need exact compatibility?
Most visitors can stop at the supported questions above. Developers can inspect exact current data-source contracts here.
Open the Technical plug-in catalogue
Search target type, capability group, minimum scan level, safety mode, configuration, output type, raw-evidence support and contract kind. Filters run locally over generated registry JSON.
Scan module
AbuseIPDB IP Reputation
Queries the AbuseIPDB v2 Check endpoint once for one exact public IP, retaining the exact response and emitting source-qualified reputation context.
- Group
- Network and security
- Minimum
- Quick
- Safety
- network
- Targets
- ip_address
- Outputs
- associated_with, domain_name, hostname, ip_address +3
- Configuration
- Required
Scan module
ActivityPub Public Collector
Collects public WebFinger, ActivityPub actor, outbox, object, reply, boost, attachment, and timestamp evidence without authentication, inbox writes, or follower-only/private access.
- Group
- Identity and public profiles
- Minimum
- Balanced
- Safety
- network
- Targets
- domain_name, free_text, online_account, social_post, url, username
- Outputs
- derived_from, links_to, online_account, replies_to +6
- Configuration
- Not required
Scan module
AIS and ADS-B Observation Importer
Imports bounded operator-custodied CSV, JSON, or JSONL AIS/ADS-B public observation exports, normalizing asset identifiers, time, position, motion, altitude, accuracy, source station, trajectories, and exact dataset evidence without controlling receivers or calling tracking APIs.
- Group
- Analysis and delivery
- Minimum
- Deep Research
- Safety
- local
- Targets
- aircraft, document, official_identifier, public_record, trajectory, vessel
- Outputs
- aircraft, identified_by, located_at, location +8
- Configuration
- Not required
Scan module
Android APK/AAB Static Analyzer
Parses bounded custodied APK/AAB manifests, components, permissions, intent filters, resources, DEX string metadata, native libraries, public endpoints, JAR signing certificates, and APK signing-block schemes offline without installing or executing code.
- Group
- Analysis and delivery
- Minimum
- Balanced
- Safety
- local
- Targets
- application_store_entry, archive, file, mobile_application
- Outputs
- application_store_entry, contacts_endpoint, contains, distributed_as +13
- Configuration
- Not required
Scan module
AWS Public Asset Discovery
Recognizes AWS resources only in submitted DNS, URL, manifest, and recorded public-response evidence. Optional live validation performs one pinned, read-only HTTPS HEAD request and never uses credentials or enumerates an account.
- Group
- Analysis and delivery
- Minimum
- Balanced
- Safety
- network
- Targets
- domain_name, hostname, organization, organization_name, url
- Outputs
- cloud_resource, cloud_storage_bucket, has_endpoint, hosted_by +5
- Configuration
- Not required
Scan module
Azure Tenant Discovery
Extracts Entra tenant IDs, issuers, verified domains, public metadata endpoints, and Azure service identities from exact public evidence. It never performs login, token, user-enumeration, or credentialed Graph operations.
- Group
- Analysis and delivery
- Minimum
- Balanced
- Safety
- network
- Targets
- domain_name, organization, organization_name, url
- Outputs
- belongs_to_tenant, cloud_resource, domain_name, has_endpoint +8
- Configuration
- Not required
Scan module
BACnet Service Probe
Sends one bounded unicast BACnet/IP Who-Is request to an exact authorized endpoint and parses one I-Am response; broadcast, property writes, control actions, and network discovery are never used.
- Group
- Network and security
- Minimum
- Deep Research
- Safety
- active
- Targets
- hostname, ip_address, network_endpoint
- Outputs
- device, device_fingerprint, hosted_by, industrial_protocol_identity +7
- Configuration
- Not required
Scan module
Bitcoin Local Transaction Graph
Builds a bounded Bitcoin address, transaction, and UTXO graph from an operator-custodied indexed export or loopback Bitcoin Core RPC without handling keys, signing, or broadcasting.
- Group
- Analysis and delivery
- Minimum
- Deep Research
- Safety
- network
- Targets
- blockchain_transaction, crypto_wallet
- Outputs
- associated_with, blockchain_asset, blockchain_input_to, blockchain_output_to +7
- Configuration
- Not required
Scan module
blocklist.de Public Feed Lookup
Checks one exact public IP address against the locally published blocklist.de IP/network snapshot without performing scan-time network work.
- Group
- Network and security
- Minimum
- Quick
- Safety
- download
- Targets
- ip_address
- Outputs
- blacklisted_indicator, contains, ip_address, ip_network +2
- Configuration
- Not required
Scan module
Blog Post Extractor
Extracts public blog posts, common CMS and microformat metadata, authors, categories, tags, public comments, pagination, permalinks, and syndication links without login/admin access.
- Group
- Files and content
- Minimum
- Balanced
- Safety
- network
- Targets
- document, url, web_page
- Outputs
- canonical_link, document, links_to, online_account +11
- Configuration
- Not required
Scan module
Bluesky Public Collector
Collects public AT Protocol handle/DID identity, profile, repository post, thread, reply, repost, CID, label, deletion, and tombstone evidence without authentication, private feeds, or writes.
- Group
- Identity and public profiles
- Minimum
- Balanced
- Safety
- network
- Targets
- decentralized_identifier, free_text, online_account, social_post, url, username
- Outputs
- associated_with, decentralized_identifier, derived_from, links_to +8
- Configuration
- Not required
Scan module
BotScout Public Reputation
Looks up one qualified public email, IP, or username in BotScout and retains the exact source response, match count, query type, collection time, and finite rate context. A username match remains source context and is never a person verdict.
- Group
- Network and security
- Minimum
- Deep Research
- Safety
- network
- Targets
- email_address, ip_address, username
- Outputs
- associated_with, email_address, ip_address, provider_record +3
- Configuration
- Not required
Scan module
Bounded First-Party Web Crawler
Crawls a finite breadth-first set of directly linked public HTML pages across the target's PSL-validated registrable domain with per-origin public-address validation, bounded safe-query and redirect handling, no form submission or script execution, exact body evidence, resource/form metadata, stable hashes, and browser-ready pinned origin admissions.
- Group
- Web and TLS
- Minimum
- Quick
- Safety
- active
- Targets
- domain_name, hostname, url
- Outputs
- asset_reference, content_hash, derived_from, form_action +9
- Configuration
- Not required
Scan module
Brand Asset Extractor
Builds a source-qualified current/historical brand profile from custodied official pages and documents, including names, logos, favicons, palettes, typography, slogans, products, applications, accounts, and domains without treating arbitrary uploads as official.
- Group
- Analysis and delivery
- Minimum
- Deep Research
- Safety
- local
- Targets
- document, domain_name, free_text, organization, organization_name, url, web_page
- Outputs
- brand_of, brand_profile, controls_account, depicts +9
- Configuration
- Not required
Scan module
Brave Web Search
Runs a bounded target-aware portfolio of paginated Brave web-index queries, preserves every exact JSON page as restricted evidence, and emits review-only URL mention candidates without fetching result pages.
- Group
- Web and TLS
- Minimum
- Quick
- Safety
- network
- Targets
- domain_name, email_address, free_text, hostname, ip_address, organization, organization_name, person_name, phone_number, tracking_identifier, url, username, vehicle_identifier, x509_certificate
- Outputs
- domain_name, email_address, hostname, ip_address +11
- Configuration
- Required
Scan module
CDN Edge Mapper
Maps bounded DNS, read-only HTTP and TLS observations for exact admitted edge addresses across approved vantages, separating edge and origin candidates without scanning provider ranges or inferring customer ownership from shared infrastructure.
- Group
- Analysis and delivery
- Minimum
- Deep Research
- Safety
- active
- Targets
- domain_name, hostname, ip_address, url, web_page
- Outputs
- announced_by, autonomous_system, cdn_edge_mapping, contains +18
- Configuration
- Not required
Scan module
Certificate Chain Analyzer
Parses a complete custodied DER chain and evaluates issuer linkage, signatures, constraints, names, time, key strength, and explicit trust-store state offline.
- Group
- Web and TLS
- Minimum
- Quick
- Safety
- local
- Targets
- content_hash, x509_certificate
- Outputs
- certificate_chain_analysis, certificate_expired, certificate_name_mismatch, certificate_trust_failure +6
- Configuration
- Not required
Scan module
Certificate Name Graph
Normalizes certificate SAN/CN assertions into an evidence-qualified name graph while keeping unvalidated names candidate-only and distinguishing wildcard scope.
- Group
- Web and TLS
- Minimum
- Quick
- Safety
- local
- Targets
- content_hash, x509_certificate
- Outputs
- associated_with, certificate_name_assertion, certificate_name_for, domain_name +11
- Configuration
- Not required
Scan module
Cert Spotter Certificate Transparency
Makes bounded paginated Cert Spotter Certificate Search API queries for issuances associated with an exact domain, preserving every exact page and emitting classified certificate, issuer and DNS-name context.
- Group
- Analysis and delivery
- Minimum
- Quick
- Safety
- network
- Targets
- domain_name
- Outputs
- domain_name, hostname, provider_record, secured_by +3
- Configuration
- Not required
Scan module
CINS Army Public Feed Lookup
Checks one exact public IP address against the locally published CINS Army IP/network snapshot without performing scan-time network work.
- Group
- Network and security
- Minimum
- Quick
- Safety
- download
- Targets
- ip_address
- Outputs
- blacklisted_indicator, contains, ip_address, ip_network +2
- Configuration
- Not required
Scan module
CISA Known Exploited Vulnerabilities Context
Refreshes CISA's official synchronized KEV JSON catalog and looks up one exact CVE only in the verified local snapshot, retaining the exact matching source object without claiming target applicability.
- Group
- Network and security
- Minimum
- Quick
- Safety
- download
- Targets
- vulnerability
- Outputs
- provider_record, vulnerability
- Configuration
- Not required
Scan module
Cloud Ownership Validator
Scores DNS delegation/CNAME, verification TXT, certificate names, first-party links, branded content, and stable organization identifiers independently. Provider IP ranges and account-like names never contribute ownership score.
- Group
- Analysis and delivery
- Minimum
- Balanced
- Safety
- local
- Targets
- cloud_resource, cloud_storage_bucket, url
- Outputs
- belongs_to_tenant, cloud_resource, cloud_storage_bucket, domain_name +7
- Configuration
- Not required
Scan module
Official Cloud Provider Range Catalog
Checks one public IP or CIDR against locally published official AWS, Azure, GCP, Cloudflare, and Fastly public range catalogs without scan-time network work.
- Group
- Analysis and delivery
- Minimum
- Quick
- Safety
- download
- Targets
- ip_address, ip_network
- Outputs
- hosted_by, ip_address, ip_network, organization +1
- Configuration
- Not required
Scan module
Cloud Storage Bucket Exposure
Parses one exact observed AWS S3, Google Cloud Storage, Azure Blob/Files/Static Website, DigitalOcean Spaces, Firebase Storage, Supabase Storage, or explicitly identified Cloudflare R2 HTTPS resource and performs a bounded anonymous GET/listing sequence. It never guesses names, follows redirects, authenticates, or attempts a write. A finding requires a confirmed provider listing or directly observed public-object response.
- Group
- Analysis and delivery
- Minimum
- Quick
- Safety
- active
- Targets
- cloud_resource, cloud_storage_bucket, domain_name, hostname, url
- Outputs
- cloud_resource, cloud_storage_bucket, hosted_by, http_response +5
- Configuration
- Not required
Scan module
Cloudflare Families Malware DNS Policy
Queries Cloudflare's fixed Families malware-filter resolver over certificate-validated DNS-over-TLS, preserves the exact DNS exchange, and reports only documented or standards-based provider policy signals.
- Group
- Analysis and delivery
- Minimum
- Quick
- Safety
- network
- Targets
- domain_name, hostname
- Outputs
- domain_name, hostname, provider_record, reputation_record
- Configuration
- Not required
Scan module
CoAP and UPnP Service Probe
Uses either one CoAP GET for /.well-known/core or one unicast UPnP/SSDP discovery with an optional same-device description GET; multicast, broadcast, SOAP controls, authentication, and state-changing actions are never used.
- Group
- Network and security
- Minimum
- Deep Research
- Safety
- active
- Targets
- hostname, ip_address, network_endpoint
- Outputs
- device, device_fingerprint, hosted_by, industrial_protocol_identity +7
- Configuration
- Not required
Scan module
Common Crawl Historical Source
Queries up to three public Common Crawl CDXJ indexes for bounded historical URL records. With an explicit Core-issued download authorization it may range-fetch up to three exact compressed WARC records as restricted evidence; it never executes, renders, or follows content from those records.
- Group
- Analysis and delivery
- Minimum
- Quick
- Safety
- network
- Targets
- domain_name, hostname
- Outputs
- domain_name, hostname, provider_record, subdomain_of +2
- Configuration
- Not required
Scan module
UK Companies House Public Data API
Queries the official read-only UK Companies House Public Data API for one company number or a bounded company-name search. Optional bounded officer, PSC, filing, charge, register, insolvency, exemption, UK-establishment, and PSC-statement records remain source-qualified public-register records with exact restricted response evidence.
- Group
- Analysis and delivery
- Minimum
- Quick
- Safety
- network
- Targets
- business_identifier, organization_name
- Outputs
- associated_with, business_identifier, located_at, member_of +5
- Configuration
- Required
Scan module
Company Website Identity Extractor
Traverses a finite fixed-and-discovered set of high-value same-origin company pages and emits evidence-backed legal names, identifiers, contacts, locations, profiles, people with stable anchors, brand claims, and public document candidates without executing scripts or submitting forms.
- Group
- Identity and public profiles
- Minimum
- Balanced
- Safety
- network
- Targets
- domain_name, hostname, url, web_page
- Outputs
- affiliated_with, associated_with, brand_of, business_identifier +24
- Configuration
- Not required
Scan module
Container Image Manifest Parser
Parses custodied OCI indexes/manifests/configs/layout archives and Docker schema-2/save archives, inventories platforms, config and layer digests, labels, environment variable names, entrypoints and history without executing or unpacking layer content.
- Group
- Analysis and delivery
- Minimum
- Balanced
- Safety
- local
- Targets
- document, file
- Outputs
- container_manifest, contains, content_hash, derived_from +5
- Configuration
- Required
Scan module
CVE List V5 Context
Refreshes the official daily CVE List V5 baseline ZIP and looks up one exact CVE or conservatively matches a discovered software/firmware release against CNA-authored affected-version declarations in the verified snapshot.
- Group
- Network and security
- Minimum
- Quick
- Safety
- download
- Targets
- cpe_name, firmware_release, software_release, vulnerability
- Outputs
- affected_by, cpe_name, firmware_release, provider_record +5
- Configuration
- Not required
Scan module
Dark Forum Structure Parser
Offline parser for bounded custodied public forum HTML/WARC with common engine adapters, exact thread/post/account/reply/quote/attachment spans, and an explicit unknown-layout fallback without identity or actor attribution.
- Group
- Analysis and delivery
- Minimum
- Advanced Investigation
- Safety
- local
- Targets
- document, file, free_text
- Outputs
- canonical_link, crypto_wallet, dark_web_mention, derived_from +12
- Configuration
- Not required
Scan module
Dark Marketplace Structure Parser
Offline parser for bounded custodied marketplace HTML/WARC, preserving public listing/vendor/category/stated-price/availability/feedback/wallet/contact claims while never checking out, messaging, accessing accounts, or acquiring goods.
- Group
- Analysis and delivery
- Minimum
- Advanced Investigation
- Safety
- local
- Targets
- document, file, free_text, web_page
- Outputs
- associated_with, canonical_link, crypto_wallet, dark_web_mention +12
- Configuration
- Not required
Scan module
Database Handshake Probe
Pins one admitted known database endpoint and performs only its pre-authentication greeting, SSL request, MongoDB hello, TDS prelogin, or TNS status exchange; it never supplies credentials, enumerates users/databases, runs data queries, or establishes an authenticated session.
- Group
- Network and security
- Minimum
- Balanced
- Safety
- active
- Targets
- hostname, ip_address, network_endpoint
- Outputs
- exposed_service, network_endpoint, network_service, protocol_negotiation +9
- Configuration
- Not required
Scan module
DeBounce Disposable Email API
Checks one exact email, domain, or hostname through DeBounce's free disposable detector and, when an optional provider key is configured, collects full single-email validation fields without treating validation status as maliciousness or replaying email credentials.
- Group
- Mail security
- Minimum
- Quick
- Safety
- network
- Targets
- domain_name, email_address, hostname
- Outputs
- domain_name, email_address, hostname, provider_record
- Configuration
- Not required
Scan module
Discord Public Invite Collector
Collects official Discord public invite and server-widget metadata, aggregate counts, public inviter identity, features, vanity codes, widget channels, and linked resources without joining a server, enumerating hidden members/messages, or authenticating.
- Group
- Identity and public profiles
- Minimum
- Balanced
- Safety
- network
- Targets
- free_text, online_account, url, web_page
- Outputs
- associated_with, links_to, online_account, provider_record +4
- Configuration
- Not required
Contract provenance and readiness
Registry generated
Technical facts come from backend-owned module, tool, object and scan-profile registries.
Readiness is separate
Registered, configured, runnable and fixture-tested states are not interchangeable proof.
Contract fingerprint
f910aadc268ef2fd49acd0dc59cd00d20805584b9250cd68cc6a7ee2578c8d2d
Start with a target
Start with the question. Let exact compatibility shape the work.
Create an account to plan your first evidence-backed investigation, or talk to us about team and workflow requirements.