About the scanner
If you’ve seen traffic from us in your logs, this page explains it. Attack Surface Scanner is a free tool run by Assertive Infosec Solutions Limited, the company behind Braintruder. People sign up and ask it to check the external security of domains they’re responsible for.
How to recognise it
- User-Agent
BraintruderSurfaceScanner/1.0 (+https://scan.assertivesolutions.io/scanner)- Source IPs
51.24.191.33- Reverse DNS
scanner.scan.assertivesolutions.io
What it does
- Passive checks (any domain): public DNS lookups, certificate transparency logs and a handful of ordinary HTTPS requests to the domain and its www host, roughly what one browser visit sends.
- Active checks (only domains whose owner has proved control with a DNS record or a file on the website): a top-100 TCP port check, probing discovered subdomains and a small, reviewed set of non-intrusive exposure checks. Rate-limited, with no exploitation, brute force or credential testing.
Opting out
If you’d like us never to scan a domain you’re responsible for, tell us and we’ll add it to our do-not-scan list, normally within one working day. Requests are handled by a person. You can also email info@assertivesolutions.io.
What we keep about your domain
Results are shown only to the user who scanned the domain (and to anyone they share a report with), and are deleted after 180 days. They describe systems, not people; any contact addresses your domain publishes in DNS or security.txt appear in that user’s report but are never used for marketing. See the privacy notice for details.
Run by Assertive Infosec Solutions Limited, registered in England and Wales, company number 16983517. Legal and privacy questions: info@assertivesolutions.io.