SwarmHawk scans every internet-facing domain you own, maps how an attacker would move through them, and delivers a prioritized action plan — not another 500-page vulnerability report.
One platform, four entry points. Pick yours below.
You built the business. You set up the domain. But is it showing up on a blacklist? Is someone spoofing it to phish your customers? Do you have an exposed login page you forgot about?
Most small businesses find out the hard way. SwarmHawk tells you before that happens.
Add your domain. Get a risk score (0–100) and a plain-English list of the 3 things to fix right now. We monitor continuously and email you the moment something changes. No security expertise required.
You're building a product, a platform, or a pipeline. Domain risk data should flow into your workflow automatically — not require logging into yet another portal and clicking export.
A clean REST API plus an MCP server so AI coding agents can query domain risk as a native tool call. Webhooks push new findings to Slack, PagerDuty, or your own endpoint. Use it in 5 minutes.
GET /scan/{domain}You manage 50, 100, maybe 300 domains across subsidiaries and acquired brands. Individual risk scores don't tell you which vulnerability connects to your ERP. SwarmHawk does.
The Org Graph clusters all your domains by organization. The Breach Path Engine builds a directed attack graph showing every viable route from internet entry point to critical asset. Choke point analysis tells you the minimum remediations that break the most paths.
You manage tens of thousands of customer domains. You're sitting on an untapped security revenue stream — and a growing abuse problem you're handling reactively. SwarmHawk fixes both.
Push your domain list via bulk API. Get daily risk feeds for your entire network. White-label the dashboard with your branding and offer it as an add-on. You earn a 30% revenue share on every subscription. We do the scanning — you clip the ticket.
Most scanners check your domain from the outside. SwarmHawk also checks what attackers find on GitHub, CISA, and across the open web — before they can use it against you.
.env commits before attackers do. Score impact: up to +20.security.txt presence, then falls back to scanning your public web pages via Jina Reader for a discoverable security contact. Required for GDPR Art.33 breach response and NIS2 Art.23 incident notification.All 4 checks run automatically on every scan. Results appear in the same grouped sections as all other findings — dashboard, PDF report, and API response. Read the docs →
SwarmHawk runs a single continuous scanning engine across 100M+ global domains. Every customer segment draws from the same live data — what changes is how you access it.
No agents to install. No firewall rules to change. SwarmHawk works entirely from the outside — the same view an attacker has.
Sign up and paste a domain name — or upload a .txt / .json list of hundreds at once. We never need access to your servers.
23 checks + 3,000+ active nuclei CVE templates run: CVE matching with active exploit confirmation, blacklist lookups, SPF/DMARC validation, active port scanning, subdomain enumeration, CMS fingerprinting, DAST probes, WAF detection, IP reputation, and more. Results in under 60 seconds.
A risk score, prioritized next steps for every finding (linked to our knowledge base), and — for enterprise — a full breach path graph showing exactly how an attacker would move through your assets.
No per-seat fees. One free domain scan to get started — upgrade for ongoing monitoring, API access, and portfolio-scale coverage.
Start with a free scan — no credit card required. Need custom volume? Talk to us.
Most tools tell you what's vulnerable. SwarmHawk tells you how an attacker would actually use it — and what single fix breaks the most attack paths.
| Capability | SwarmHawk | Traditional Scanners | Enterprise EASM ($200k/yr) |
|---|---|---|---|
External asset discovery Continuous, no agents needed |
✓ | ✓ | ✓ |
Breach path visualization How the attacker moves through your assets |
✓ | — | ✓ |
Choke point prioritization Minimum fixes, maximum path reduction |
✓ | — | Partial |
Global domain depth All ccTLDs + gTLDs, 150+ countries |
✓ 100M+ domains | Partial | Global only |
GitHub PoC & leak intelligence Public exploit code + credential leaks for your domain |
✓ | — | — |
CISA KEV software matching Direct match of your tech stack against known-exploited CVEs |
✓ | Partial | ✓ |
MCP server for AI agents Works with Claude, Cursor, Copilot |
✓ | — | — |
B2B reseller programme White-label + revenue share |
✓ | — | — |
Accessible pricing Starts free, not at $200k/yr |
✓ Free → $79/mo | Varies | $200k+/yr |
Start with one domain, for free. No credit card. No setup. First result in under 60 seconds.