Real-Time Newly Discovered Subdomains
Catch New Subdomains Under Your Name as Discovery Finds Them.
The API delivers newly discovered subdomains as a daily file. On your domains, External Attack Surface Management runs discovery continuously and can notify your team when it finds a new asset. For anything wider, talk to our data team.
Found from acme.example
found staging.acme.example
not in your inventory
, then approved
Scanall checked
staging.acme.example
-
DNS
A 203.0.113.7
snapshot 2026-09-24
-
SSL
*.acme.example · valid
snapshot 2026-09-24
-
Web data
Apache httpd 2.4.49 · CVE-2021-41773 · KEV
snapshot 2026-09-24
Critical -
HTTP
200 · login page
snapshot 2026-09-24
new_asset_discovered tells your team instantly or in a digest; then it is scanned like every asset
Discovery That Keeps Running on Your Domains.
Asset Discovery starts from your seed domains and proposes the subdomains and IP addresses it finds for your team to approve. A notification rule on new_ tells your team as soon as there is something new, or in a digest.
-
Root domain
acme
.example IP address
-
www.acme.example
443/tcp · TLS 1.3
nginx 1.25
198.51.100.10
-
mail.acme.example
25/tcp · SMTP
MX · SPF record
198.51.100.12
-
api.acme.example
Certificate expires in 6 days Medium
198.51.100.40
-
staging.acme.example
Apache httpd 2.4.49 High
CVE-2021-41773 Critical KEV
203.0.113.7
-
shop.acme.example
PHP 7.4 · end of life High
198.51.100.77
-
blog.acme.example
Login page · HTTP 200
192.0.2.15
-
Asset discovery
not in inventory · found from the root
-
vpn-legacy.acme.example, not in inventory
3389/tcp · RDP open Critical
203.0.113.24
Pick a Route to New Subdomains by Scope.
Your Domains, Continuously
EASM discovery with a review queue, notifications on new assets and continuous scanning once approved.
The Whole Index, Next Day
All subdomains Deepinfo discovered in the last day, as one CSV or JSON file.
One Domain, on Demand
All known subdomains of a domain, as full records, whenever you call it.
Anything Else
Tell our data team what your pipeline needs, and they tell you what can be provided.
What Our Data Team Asks First.
-
Which names
All new subdomains in the index, or only those under a list of apex domains.
-
How fast
How quickly your pipeline needs to see a new hostname, and why a daily file is not enough.
-
Where to
How your team loads data today, so the delivery fits the systems you already run.
Questions About Real-Time Newly Discovered Subdomains
Is there a streaming or webhook endpoint for new subdomains?
Not in the public API. New subdomains are delivered as a daily file through Daily Discovered Subdomains. For other needs, talk to our data team.
What does the daily file cover?
Each subdomain new to the index in the last day, counted back from the file_ in the response, as CSV or JSON through a download link valid for one hour.
Does “discovered” mean the subdomain is new on the internet?
Not necessarily. It means new to Deepinfo’s index. A host can run for a while before it is first observed.
Can discovery approve new assets automatically?
Yes. Custom discovery rules are filters over the global domain data, and a rule can either propose assets for review or approve them automatically.
How is the daily file priced?
Data feeds are priced on their own, by volume and frequency, separately from the platform. See Data & API pricing.
See What Appears Under Your Domains.
Book a walk-through of discovery on your own domains, or talk to our data team about your pipeline.