Vigía Recon checks your SSL, domain, and DNS every day, then looks at your site the way an attacker would: spoofable email, exposed services, known vulnerabilities, leaked files. You hear about it first.
Nobody notices a certificate has 22 days left — until the moment it flatlines and your site shows "Not Secure" to a paying customer.
One live monitor, checked daily, that tells you exactly what's at risk before it costs you anything.
Every certificate, every domain, every day — flagged the moment it drops inside 30 days.
A lapsed registration is worse than a lapsed cert. We track renewal dates so it never happens silently.
Catch an unauthorized certificate issued for your domain — a real signal of compromise, not just an expiry date.
Silent MX or TXT record changes are how email gets hijacked. We snapshot and alert on every change.
No dashboard-checking required. The moment something needs attention, it's in your inbox.
Every domain's vitals in one live view — built for owners who don't want a technical report.
Attackers start with what anyone on the internet can see. So does Vigía Recon. Every domain gets a daily 0–100 security score, with each finding explained in plain English and a fix to go with it.
Checks SPF, DMARC, and DKIM, which decide whether someone can send email pretending to be you. Weak settings are how phishing emails land in your customers' inboxes.
Matches your server's software against public CVE databases and flags the ones attackers are actively exploiting right now.
Finds databases, remote desktop, and admin ports left open to the whole internet. These are the doors ransomware walks through.
Missing security headers, leaked software versions, insecure cookies, old TLS versions, and HTTP pages that never redirect to HTTPS.
Looks for the mistakes that hand over the keys: a public .git folder, an .env file full of passwords, a database dump left behind.
Spots old subdomains still pointing at deleted cloud services, which someone else could claim and serve content from under your name.
Public DNS, a normal page load, and what internet-wide scanners already know. Nothing a regular visitor wouldn't do.
Leaked-file checks only run after you prove you own the domain with a DNS record. Nobody can point Vigía Recon at a site that isn't theirs.
Start free. Upgrade when you're watching more than one site.
Add your first site in 30 seconds. We'll watch the vitals and the ways in.
Add your first site free