A42 Recon+Exposure
Continuous External Attack Surface Management, Dark Web Monitoring & Code Security Analysis
100% external assessment — no infrastructure access or credentials required
Be ahead of hackers
We help you discover vulnerabilities and data leaks before attackers do.
Key Features
Safe & non-invasive reconnaissance
Scanning is performed externally without internal network access, ensuring zero disruption to your business operations.
Uncover forgotten & shadow assets
Automatically discover all domains, subdomains, open ports, and active services. The platform identifies "Shadow IT"— untracked or forgotten assets exposed to the internet.
Comprehensive threat detection
Assess discovered assets for known vulnerabilities (CVEs). Our real-time threat database ensures newly published risks are flagged immediately upon emergence.
Deeper than traditional scanning
Beyond automated infrastructure monitoring, the platform executes targeted in-scope testing to catch complex business logic flaws, not just surface-level vulnerabilities.
Dark Web Leaks
Dark-web monitoring for credentials and data linked to your domains, with status triage, search by value across all leaks, bulk status updates, and CSV export.
Analytics, Reporting & Smart Detection
The platform uses artificial intelligence to analyze collected data, minimize false positives, and generate clear reports prioritized by risk with remediation recommendations.
Flexible scheduling built around your needs
Run manual scans on demand or set automated schedules, up to 10 scans per domain each month.
Proof for audits
Generate documentation to present to clients, auditors, and regulators as third-party proof of independent security verification.
Typical Use Cases
CISOs & Security Teams
Automate continuous monitoring without building internal tooling.
DevOps & Engineering
Identify weak spots in your infrastructure after each deployment.
Development Teams
Analyze source code before release and fix findings with an AI agent.
Product Leads
Request a deep AI Pentest before a major launch.
Compliance & Audit
Produce evidence of independent testing for ISO 27001 and SOC 2.
Public Sector
Keep manual scan control for legal transparency, with role-based access.
How It Works
Recon+Exposure
Recon
First, the platform constructs a complete view of your attack surface — exactly as an attacker would during reconnaissance.
Open Source Intelligence
The platform collects publicly available data to build a map of the technologies and services you use. This includes subdomain discovery, WHOIS, DNS, IP, email settings, web application discovery, cloud and GitHub intelligence, technology stack and version detection, as well as CMS and frameworks.
Deep Scanning
Scans ports, collects banners and identifies operating systems. Uncovered gaps at this stage represent potential entry points for threat actors.
TLS/SSL
Assesses site encryption standards through port and cipher suite audits to ensure connections align with modern security requirements.
Exposure
Next, the platform locates exposed sensitive assets vulnerable to immediate exploitation.
Exposed Data & Misconfigurations
Detects exposed passwords, tokens, backups, CI/CD pipeline leaks, open Swagger/OpenAPI docs, admin panels, staging environments, and debug files.
Vulnerabilities
Continuously checks systems against active CVE databases and checks for web flaws like XSS, SQLi, Open Redirect, LFI, SSRF, XML injection, RCE, SSI and IIS issues.
Hidden Directories & Files
Discovers hidden endpoints using tech-stack-adapted fuzzing techniques to expose public interfaces, default pages, open cloud storage buckets, and metadata leaks.
Third-Party & Internal APIs
Identifies risk-bearing external integrations and exposed internal endpoints (e.g., Slack, Cloudflare, internal API routes, OAuth configs, file managers, and control panels).
Dark Web Monitoring
Automated monitoring of your domains across dark web marketplaces, cybercrime forums, paste sites and breach dumps.
The module identifies and correlates compromised corporate emails, breached passwords/hashes, exposed service keys, and leaked domain data. This grants early visibility so you can remediate exposure before threat actors exploit it.
AI SAST
Source code security analysis based on OWASP Rules enhanced by proprietary detection engines to catch vulnerabilities before code hits production.
- Executes ~200 specialized security checks within minutes.
- Provides detailed risk classification and remediation steps.
- Export reports in Markdown format to feed directly into AI coding agents for automated fixes.
- Keeps scan history to track remediation progress over time.
- Supports all modern programming languages at no extra cost.
How to Get Started with A42 Recon+Exposure
-
Add your domain & verify ownership
Enter your root domain on the Domains page, allow our scanner IP if using a firewall and complete verification via root file or DNS TXT record.
-
Run your first scan
Automatically map subdomains, identify stack components, surface shadow assets, and scan for active vulnerabilities/leaks.
-
Review the findings
Every report is designed for both technical teams and executive leadership:
- Full list of vulnerabilities prioritized by severity
- Discovered assets
- Remediation recommendations with technical details
- One-click PDF export
Sample report available via corporate email -
Enable automated scanning
Set your preferred scan cadence and receive email notifications upon completion. No manual intervention needed.
-
Set up team collaboration
Invite team members, assign Role-Based Access Control (RBAC), and streamline vulnerability remediation.
-
Track Darkweb leaks
Let the Dark Web Monitoring module automatically track domain mentions across breach channels.
-
Verify code security with AI SAST
Analyze source code security in minutes across all active languages—included out of the box.
Platform Security
A42 Recon+Exposure is built to satisfy strict security requirements, making it ideal for government agencies and defense-sector organizations.
Scans are strictly non-intrusive and conducted externally without storing sensitive client data. You gain full visibility into your attack surface without giving us access to your internal networks.
See your attack surface through the eyes of an attacker before they exploit your vulnerabilities.
Frequently Asked Questions (FAQ)
How often can scans run?
You choose the interval for each domain, anywhere from every 7 days to once a year, and you can start a manual scan at any time. Both kinds count towards the same limit of 10 scans per domain per month, so a weekly schedule uses about four of them and leaves six for manual checks.
What do I need to provide to start scanning?
Just your root domain and a simple verification: either a file uploaded to your website or a TXT DNS record. Source code is required only for AI SAST, and is optional for an AI Pentest.
How secure is the platform itself?
Infrastructure testing is performed entirely from the outside, using non-intrusive methods, and requires no access to your internal network or credentials. Two modules are different by design, because you supply the material yourself: AI SAST works with your source code, and an AI Pentest can additionally use test accounts and documentation you provide. In both cases you decide what to share, and nothing is used for any purpose other than the test you requested.
What happens to the source code I submit to AI SAST?
No one at A42 reads your code, and it is never used for any purpose beyond your scan. Your code is analyzed inside an isolated Docker container created specifically for that scan. When the scan finishes, the container is destroyed along with everything in it, so your source code exists on our side only for the duration of the analysis. This is also why a ZIP archive cannot be re-scanned later: the files are gone, and you would need to upload them again. Linking a Git repository avoids that, since A42 reads the current state of the code at the start of each scan.
What happens if a critical vulnerability is found?
It is highlighted in the dashboard and in the report. Every finding includes a technical description, a CVSS v4.0 score, and recommended mitigation steps, so your security or development team can act on it immediately.
How do I know when a report is ready?
The account owner receives an email as soon as a scan completes. To have colleagues notified as well, or to post alerts into a Slack channel, configure this on the Notification tab. The report itself is never attached – you open or download it from the dashboard, where every scan version stays available.
Can I add team members and control what they can see?
Yes. A42 supports multi-user accounts. You can invite colleagues by email, create any roles your organization needs, set permissions for each platform module, and assign those roles to team members.
What is the difference between the Test Completion Statement and the Attestation?
The statement confirms that testing was carried out and reports the number of open findings by severity, with no technical detail. The attestation additionally confirms that no Critical or High findings remain open, and is meant to be shown to third parties as evidence of independent verification.
What is the difference between a scan, AI SAST and an AI Pentest?
A scan runs automatically against your perimeter from the outside and needs nothing from you beyond a verified domain. AI SAST analyzes source code you provide and reports weaknesses in the code itself. An AI Pentest is a targeted engagement: you define the scope and the rules, and the agents attack it in depth, using any context you share.
Can I integrate A42 with our own systems?
Yes. The Export API returns projects, vulnerabilities, and leaks in a machine-readable form. Create an API key on the Integration tab, restrict it to known IP addresses, and set an expiry date.
Does A42 platform help to pass audits?
Yes. Continuous external monitoring and structured reporting streamline technical risk assessments required for ISO 27001, SOC 2, PCI DSS, and NIS 2 compliance.