Pricing

from $12.00 / 1,000 domain scans

Try for free

Go to Apify Store

🦅 ReconHawk — Attack Surface & Subdomain Takeover Scanner

Try for free

Read-only attack-surface recon for domains you own or are authorized to test: subdomain discovery, WAF/CDN fingerprint, subdomain-takeover risk (36-service reference DB), exposed S3 buckets, and leaked AWS keys in JS. For bug bounty hunters, pentesters & security teams.

Pricing

from $12.00 / 1,000 domain scans

Rating

0.0

(0)

Developer

Hitman studio

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Categories

This Actor‘s pricing details are outlined in the table below. The unit prices you pay depend on your Apify subscription plan, with higher tiers offering better rates. Visit our pricing page to compare plans and see how much you can save.

Pricing	Free No discount	Starter Bronze discount	Scale Silver discount	Business Gold discount

Domain scan	$12.00 / 1,000	$12.00 / 1,000	$12.00 / 1,000	$12.00 / 1,000
Actor Start Infrequent	$0.02	$0.02	$0.02	$0.02
Additional costs
Platform usage	Free	Free	Free	Free

This Actor's pricing details are outlined in the table below. Visit our pricing page to compare plans and see how much you can save.

Pricing

Domain scan One complete attack-surface scan for a domain (subdomains, WAF/CDN, takeover risk, cloud exposure).	$12.00 / 1,000
Actor StartInfrequent Charged when the Actor starts running. Number of events charged depends on Actor memory (one event per GB, minimum one event).	$0.02
Additional costs
Platform usageIncluded Platform usage costs are tied to the Actor's performance in terms of the underlying platform resources it consumes. Learn more	Free

Tech Stack Detector - Wappalyzer & BuiltWith Alternative

clearfetch/tech-stack-detector

Detect the technologies behind any website: CMS, ecommerce platform, JavaScript frameworks, analytics, ad tech, CDN, hosting, email provider. 7,600+ fingerprints, versions and confidence scores. Clean JSON per website.

Nada Hanad

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Andok

🛡️ AI Agent & MCP Security Scanner

inexhaustible_glass/agent-security-scanner

Scan GitHub repos for AI-agent, MCP-server & skill security risks: prompt injection, tool poisoning, hallucinated packages, secrets & dangerous code.

Hitman studio

Website Tech Stack Scanner

lowlanddata/website-tech-scanner

Give it a list of domains and get back what each site runs: e-commerce platform, CMS, frameworks, analytics, payments, CDN, hosting and mail stack. Every detection carries its confidence and the evidence that triggered it, because a stack claim without evidence is a guess. No API key, no login.

Lowland Data

crt.sh Cert Monitor — Subdomain & SSL Cert Discovery

vhsgreed/crtsh-cert-monitor

Monitor certificate-transparency logs via crt.sh (keyless, no API key) for any domain: newly issued subdomains, certificate issuers, first/last-seen dates and cert IDs. Flat one-record-per-cert output for CSV/Excel/JSON export. Ideal for attack-surface discovery and brand monitoring.

Karl Sundström

🛡️ Domain Cyber Risk & Attack Surface Posture Auditor

unrivaled_fortress/domain-cyber-risk-attack-surface-auditor

Audit corporate domain attack surface: SSL certificate transparency subdomains, DNS SPF/DKIM/DMARC email security, open ports, and HTTP headers (SecurityScorecard alternative).

David A

Redirect Hop Destination and Private-Network Exposure Gate

kingii98/redirect-hop-destination-and-private-network-exposure-gate

Prove that no hop of a redirect chain reaches your internal network. For each URL the Actor walks every hop with automatic redirects off, resolves the hostname of each hop, classifies every address the resolver answers (public, RFC1918 private, loopback,

kingii98

Tech Stack Detector: Wappalyzer & BuiltWith Alternative

deriverge/tech-stack-detector

Detect what any website is built with, in bulk: CMS, ecommerce, analytics, ads, tag managers, frameworks, servers, CDN and hosting, plus email and SaaS tools from DNS. 7,600 fingerprints with version and evidence, change alerts. JSON, CSV, Excel, API.

deriverge s.r.o.

RSS Feed Scraper - Atom & JSON Feed Reader, New Item Monitor

neverempty/rss-feed-scraper

Give it feed URLs or plain website URLs. It finds the feed a site advertises, reads RSS 2.0, RSS 1.0/RDF, Atom and JSON Feed in any encoding, and returns one row per item with title, link, dates, author, summary, full text, categories, image and enclosures. Monitoring mode returns only new items.

NeverEmpty

Website Technology Stack & CMS Fingerprinter

trusted_tech_spot/company-tech-stack-detector

Detects CMS platforms, e-commerce engines (Shopify, WooCommerce), frontend frameworks (React, Next.js, Vue), analytics trackers, and hosting CDNs running on any domain.