About Scryer’s scanning
Scryer is a search engine for the public web. As new domains and services become publicly reachable, we take a lightweight, non-intrusive look at whether a web service is live there — recording only what an ordinary visitor would see — so security teams and researchers can map and monitor attack surface.
We are an OSINT tool for security professionals and organizations. We are not a hacking service, and we do not offer contracting or professional services. Scryer only observes what is already publicly reachable, exactly as an ordinary visitor would see it.
What we do
- Observe domains as they appear on the public web.
- Send lightweight, standard HTTP and HTTPS requests to check whether a web service is live.
- Record what an ordinary browser would see: response headers, page title, technologies, TLS certificate details, and a screenshot of the homepage.
- Run a passive, non-intrusive detection pass — safe fingerprinting and exposure checks only.
- Identify ourselves on every request with a User-Agent that links back to this page.
- Respect rate limits so we never place meaningful load on a host.
What we never do
- Attempt to log in, guess credentials, or bypass authentication.
- Send exploit, fuzzing, injection, brute-force, or denial-of-service traffic.
- Access anything a host does not already serve publicly to an ordinary visitor.
- Scan networks or ports beyond the standard web services on a discovered host.
- Sell or share the data, or use it for anything other than our OSINT search product.
How to identify our traffic
Every request we make carries this User-Agent header:
Scryer/1.0 (+https://scryer.network/scanning)
If you need our source IP ranges to correlate against your logs, email us and we will share them.
Opt out of scanning
If you would prefer that we not scan or index your domains, email abuse@scryer.network from an address at the domain, or with enough detail for us to confirm you are authorized to make the request.
- We exclude the domain and every host beneath it — matched by registrable domain — from future scans.
- We remove any data we have already collected for it.
- We confirm once the exclusion is in place.
Questions about our methodology or the data we hold? Email support@scryer.network.