What does your domain give away?
Enter a domain to see the vendors and infrastructure an attacker can map from public records alone — your mail filter, your SaaS stack, forgotten subdomains, and gaps like a backup MX that skips your filtering. Passive only. Nothing is stored.
Public records only. No port scans, no logins, no stored reports.
Findings come from public records and may be out of date. This is for the domain owner's
own security review.
How it works
NullForge only reads information that is already public: DNS records, certificate transparency logs, registration (RDAP) data, and IP-to-network mappings. It never connects to your servers to probe them, never attempts a login, and never runs a port scan. It's the same information any mail server or browser can see — gathered in one place, with the evidence shown for every finding.
Nothing you look up is saved. Reports are built on the fly and discarded. We keep only a short-lived technical cache of third-party lookups and a count of requests per address to prevent abuse.
More tools
Beyond the domain report, NullForge has a growing set of fast, free utilities for techs — a subnet calculator, DNS lookup, SPF and DMARC builders, hashing, encoding, timestamp and cron helpers, and more. Every one runs entirely in your browser.