Use cases

Apply one investigation model to different questions.

These workflows explain likely starting targets, evidence, graph relationships, outputs, scan depths and safety boundaries. They are not hidden scan profiles.

Workflows

Start with intent, then let the target and depth shape the plan.

Choose a workflow to understand what a well-scoped investigation could produce.

Domain and infrastructure assessment

Map public domain, DNS, certificate, host and service evidence into a reviewable asset graph.

Authorized domain, hostname, IP address or ASNExplore workflow

Email and TLS posture review

Review mail routing, authentication policy, HTTPS, headers and certificate evidence without overstating risk.

Authorized domain, hostname, email address or URLExplore workflow

Supplier and third-party research

Collect public company, domain, software and infrastructure context before a supplier decision.

Company name or known public domainExplore workflow

Public company footprint review

Connect public organization records, identifiers, domains, people-adjacent signals and documents for analyst review.

Company or organization nameExplore workflow

Attack-surface evidence collection

Collect evidence about authorized public assets and exposure for remediation review—not exploitation.

Owned domain, hostname, IP range or approved target listExplore workflow

Incident and threat-context research

Correlate public indicators, reputation, infrastructure and source-qualified threat context around an investigation.

Authorized domain, hostname, IP address, URL, hash or indicatorExplore workflow

Document and metadata investigation

Preserve collected file bytes and safely extract local metadata, text and candidate entities without executing content.

Approved public document, image, file or file hashExplore workflow

API-driven evidence collection

Submit simple target intent, poll bounded jobs and consume canonical objects through workspace-scoped keys.

One supported public target per API requestExplore workflow

Client reporting and handoff

Standardize authorized client investigations and deliver reviewable findings, evidence, reports and exports.

Client-approved public domain, company, infrastructure or file targetExplore workflow
Use-case copy never changes registry compatibility, public depth semantics, plan enforcement or safety gates.

Start with a target

Start from an authorized target—not a hidden profile.

Create an account to plan your first evidence-backed investigation, or talk to us about team and workflow requirements.