About Scryer’s scanning
Scryer is a search engine for the public web. As new domains and services become publicly reachable, we take a lightweight, non-intrusive look at whether a web service is live there — the sort of information any visitor to the site could observe.
It’s an OSINT tool for security teams and researchers — mapping and monitoring internet-facing attack surface from what is already out in the open.
🛡 What we do
- ✓Observe domains as they appear on the public web.
- ✓Send lightweight, standard HTTP and HTTPS requests to check whether a web service is live.
- ✓Record what an ordinary browser would see: response headers, page title, technologies, TLS certificate details, and a screenshot of the homepage.
- ✓Run a passive, non-intrusive detection pass — safe fingerprinting and exposure checks only.
- ✓Identify ourselves on every request with a User-Agent that links back to this page.
- ✓Respect rate limits so we never place meaningful load on a host.
⊘ What we never do
- ×Attempt to log in, guess credentials, or bypass authentication.
- ×Send exploit, fuzzing, injection, brute-force, or denial-of-service traffic.
- ×Access anything a host does not already serve publicly to an ordinary visitor.
- ×Scan networks or ports beyond the standard web services on a discovered host.
- ×Sell or share the data, or use it for anything other than our OSINT search product.
🌐 How to identify our traffic
Every request we make carries this User-Agent header:
If you need our source IP ranges to correlate against your logs, email us and we will share them.
✉ Opt out of scanning
If you would prefer that we not scan or index your domains, email [email protected] from an address at the domain, or with enough detail for us to confirm you are authorized to make the request.
- ✓ We exclude the domain and its subdomains from future scans.
- ✓ We remove what we hold for it from our index.
- ✓ We confirm once the exclusion is in place.
Questions about our methodology or the data we hold? Email [email protected].