Vulnerabilities and exposure

"Exposure" is everything on the outside of a domain that an attacker could use: a known vulnerability in software the site runs, a service listening on a port it should not, a secret in a public file, a host nobody remembered. DomainGuard finds it with a container of open-source scanners plus its own checks, never sends traffic to a domain the account has not proven it controls, and labels every verdict by the evidence behind it.

Articles

• Exposure scans: profiles, tools and limits - quick, standard, deep, port-scan and extreme; what each runs; the manual allowances and the opt-in schedule.
• Scan clearance and ownership proof - one proven domain clears the account for 90 days; DNS, file or email proof; protected targets; the operator authorisation queue.
• Findings, carry-forward and dismissals - severity, what a finding shows, why a lighter scan cannot clear a heavier one's findings, and the four dismissal reasons.
• Hosts and open ports - every host found, its services named by what the port means, and the 128-port list.
• Software inventory and vendors - what a scan proved the site runs, split into versioned and only-seen, with confidence and the detector.
• KEV and CVE alerts with verdicts - the feeds, watch-forward alerting, and the four exposure verdicts.
• The software watchlist - track a product for new advisories, alert cadence, sources and severity filter; site versus device software.

Where

• Web: Security (account-wide), and a domain's Vulnerabilities module.
• iOS: a domain's Vulnerabilities module with three segments: Alerts, Software, Hosts. Vulnerabilities was a tab until 2026-09-02; it is a module now, so the domain is chosen by opening it.
• API/MCP: /api/vuln-scan/*, /api/vulnapps/*, /api/scan/ports/:id; the vulnscan scope.

Common questions

Is a scan safe for my site? The templates are non-intrusive reads and the port probe is a connect test. Nothing exploits, writes or floods, and the scanners run only on domains the account has proven it controls.

Why does my domain say "0 findings" after only a Quick scan? A Quick scan reads what the site serves and nothing more. Prove ownership and run Standard for the active checks; until then the page says which profile ran.