Paste any domains, URLs, IP addresses and subnets you want monitored. One domain is enough to begin, but every extra starting point gives you a more complete picture. No installation, and a solid picture in about an hour.
14-day free trial. Hosted in Germany, GDPR compliant.
Each step builds on the one before. Most people finish the first three in a single sitting.
Paste everything you want monitored under Assets: domains, URLs, IP addresses and subnets, one per line or comma-separated, mixed freely. We sort them out. One domain is enough to start, but the more starting points you give, the better the results. Every entry is validated, and internal or unroutable addresses are filtered out. Subnet monitoring is available on premium and enterprise plans.
DomainsIP addressesSubnets
Within minutes, hosts, websites, certificates, DNS records, exposed email addresses, suppliers, vulnerabilities and phishing look-alikes of your domains start to appear. Follow it live on the events timeline. Discovery never stops: most checks repeat daily.
Live timelineAttack surface graph
When a scanner can't be certain an asset is yours, such as a neighbour on shared hosting, it asks instead of guessing. Accept or reject with a click. Do this right after your first discovery and the graph stays accurate from then on. How suggestions work.
AcceptReject
A weekly PDF with your most pressing issues is switched on for every user. Send it to anyone you like, pick more from the Report Library, or write your own with a Splunk-like query language your SOC already knows.
Weekly PDFReport LibraryExcel export
You don't have to keep checking the dashboard. Switch on the alerts that matter and ShadowTrackr tells you the moment something changes. Common starters are already configured for you, the Alert Library has ready-made templates, and "reset user alerts" undoes any experiment.
Once discovery is running, shape what you see so the important things stay in front.
Label your crown jewels, such as mail and remote login servers, and give them their own graph or stricter alerts. Built for accounts with thousands of assets.
Ignore URLs or hosts that belong to someone else, even for future subdomains. Think twice though: warning a client about their own exposed server is a feature.
Plant free tokens from Thinkst and connect them to ShadowTrackr. You hear about it the moment someone touches them. Read how.
Beyond ports and certificates, the same data answers questions most tools don't ask.
For most data we keep up to three years of history, counted from when your account became active. Which ports were open last month? When exactly was that vulnerable software exposed? The sooner you start, the more you can look back on when an incident happens.
We identify the suppliers behind your software, hosting, certificates and mail, and classify whether each one is controlled in Europe or outside it. Built for NIS2.
Domains that imitate yours are tracked. Block them to stop phishing attacks from reaching your organization, or buy them pre-emptively to protect your brand and your customers too.
In ShadowTrackr, a problem is something to fix now. A warning matters but can wait. Browse reports and events regularly, and let the weekly report remind you.
Alerts reach you by email or webhook, and only for the alerts you switch on. Start with the worst ones, so every message stays worth reading.
Pull everything out through the API, available on Business and Enterprise plans (and multi-tenant for MSSPs), or enrich it with other sources.
It takes a list of your domains and IP addresses and a few minutes. Your data stays in the EU.
Start your free trial14-day free trial. Hosted in Germany, GDPR compliant.
Questions first? Talk to us, check the FAQ or browse the full quick start.