Artifhack maps your external attack surface, detects your data leaks and breaches, then correlates everything into a single score : your real exposure, seen from the outside.
| Artifact | Type | Severity | Score |
|---|---|---|---|
| mail.acme-corp.com/.env | Exposed .env file | Critical | 89.0 |
| sk_live_3aea0f95abf88d… | API key | Critical | 80.0 |
| preprod.acme-corp.com/backup.zip | Exposed archive | High | 74.0 |
| eyJhbGciOiJIUzI1NiJ9… | JWT token | High | 70.0 |
| vpn.acme-corp.com | Exposed service | Medium | 52.0 |
Continuous discovery of your domains, subdomains, IPs, services and forgotten assets — agentless, from the outside.
01Secrets, credentials, .env files, API keys and tokens exposed on the web, public repositories and the dark web.
02Monitoring criminal forums, marketplaces, Telegram channels and ransomware sites: your access, your data, your name.
03Typosquatting, cloned sites, fraudulent social profiles and brand impersonation: detected and documented for takedown requests.
04Detect your data appearing in breaches: credential combos, leaked databases and criminal markets.
05A cyber risk rating for suppliers, partners and prospective subsidiaries to inform collaboration and acquisition decisions.
Explore third-party scoring06| Host | Port | Technology | SSL | Score |
|---|---|---|---|---|
| admin.acme-corp.com | 443 | nginx | ✓ | B · 6 |
| api.acme-corp.com | 443 | PHP | ✓ | A · 9 |
| grafana.acme-corp.com | 443 | Grafana | ✓ | A · 10 |
| jenkins.acme-corp.com | 8080 | Jenkins | — | C · 4 |
| git.acme-corp.com | 443 | GitLab | ✓ | A · 9 |
| vpn.acme-corp.com | 443 | OpenVPN | ✓ | C · 4 |
Complete inventory of exposed services, IP geolocation, detected technologies and per-asset scores — export to CSV / PDF in one click.
Each module detects a signal. The correlation engine combines them per asset and reconstructs the scenario an attacker would follow — before they do.
Each module feeds the score · the score drives everything else
One domain is enough. Artifhack discovers the rest: subsidiaries, subdomains, IPs and cloud assets.
Attack surface, exposed artifacts, leaks and breaches collected continuously.
Signals are combined per asset: the score reveals real attack paths.
Prioritised alerts, practical recommendations and audit-ready reports.
Your vulnerability inventory is sensitive data: it should stay under your control. Artifhack is designed, developed and hosted in France.
French company, French team, code developed in-house. No dependency on a foreign software vendor.
Infrastructure with a French hosting provider. Your security data stays on French soil.
Data minimisation, access traceability and encryption: compliance is built into the product from the start.
Your contacts are based in France and easy to reach, with direct support from our team.
Supports digital sovereignty initiatives · local authorities · critical operators · sensitive supply chains
Continuous attack surface monitoring and data leak detection are central NIS2 requirements and a pillar of ISO 27001. Artifhack continuously documents your compliance.
A personalised demo on your own scope. 30 minutes, with no commitment.