grc-scan
← Back to homeFree · no sign-up

Exposure check

Checks which services on a site are reachable from the public internet and flags anything that usually shouldn't be. Enter a domain you own or are responsible for. We don't store anything.

What this scan does (and what it can't)

It checks whether ~16 common services (web, email, databases, remote access) are reachablefrom the public internet on your domain. It tells you what's exposed — not whether it can be broken into. Think of it as checking which doors are visible from the street, not trying to open them.

  • It's a quick, lightweight check (a simple connection test to each port), not a full vulnerability scan — that's the in-depth vulnerability scan.
  • If your site sits behind a CDN, load balancer or proxy(most do), the results reflect that front door, not your origin server — and some of those devices answer on every port, which we detect and flag rather than report as real exposure.
  • It can't see anything that requires logging in, or on other pages/subdomains.