# Home

URL: https://www.deepinfo.com/

Snapshot · Last refresh 2026-10-29 20:01 UTC

Continuous Threat Exposure Management

## We Index the Internet. Your External Security Runs on It.

Deepinfo indexes the whole internet: 400M+ domains, 2B+ subdomains, 200B+ DNS records and 30B+ SSL certificates, with their IP addresses and their WHOIS and HTTP records. Your assets, your vendors and the lookalikes built to copy you are already in it. We bring them to light.

[Request demo](https://www.deepinfo.com/request-demo/)

Last 7 days, from our index

- 1,977,622 new domains registered
- 3,899 CVEs published
- 8 added to CISA KEV

[Internet Insights](https://www.deepinfo.com/insights/)

Among the 10,000+ organizations working from Deepinfo data

- Turkish Airlines
- Turkcell
- Aselsan
- Bitsight
- Wiley
- Albaraka
- Invicti
- Türksat
- Havelsan
- Beko
- Istanbul Airport
- Tüpraş
- Hes Kablo
- DHMİ
- TCDD
- Türk Kızılay
- PTT
- Konya Metropolitan Municipality
- Fatih Municipality
- EntryZero
- Boğaziçi University
- Yıldızlar Holding
- QIIB
- Schmetterling
- Oceanit
- Solmaz
- İHH
- Burulaş
- Doco

### [External Attack Surface Management](https://www.deepinfo.com/platform/easm/)

#### Map Everything You Own on the Internet. Especially What You Forgot.

Start from one domain. The platform discovers the subdomains, IP addresses, certificates, open ports and technologies behind it, then keeps scanning all of them. Findings arrive scored, with evidence your team can hand to an owner.

[Explore External Attack Surface Management](https://www.deepinfo.com/platform/easm/)

### [Brand Risk Protection](https://www.deepinfo.com/platform/brp/)

#### Find the Domains Built to Look Like You.

A convincing phishing page needs a convincing address. The platform matches newly seen domains against your brand names, down to letters from other alphabets that the eye cannot tell apart. When one resolves, your team sees its DNS, certificate and HTTP evidence and can request a takedown.

[Explore Brand Risk Protection](https://www.deepinfo.com/platform/brp/)

### [Third-Party Risk Management](https://www.deepinfo.com/platform/tprm/)

#### Your Vendors’ Exposures Are Yours Too.

A questionnaire tells you what a supplier believes about itself. The platform scans each third party with the engine and layers it runs on your surface, and scores them all on one scale. When a vendor slips, you see it in the next scan, not the next annual review.

[Explore Third-Party Risk Management](https://www.deepinfo.com/platform/tprm/)

### Under Every Module Is an Index We Built.

Many platforms rent their view of the internet. We collect ours, resolve it and keep it with its history. That data powers each module, and your analysts and developers can query it directly.

400M+ domains

Registered domains across every TLD, with registration, WHOIS history and daily deltas.

[Domain Search](https://www.deepinfo.com/data-api/apis/domain-search/) · [Feeds](https://www.deepinfo.com/data-api/feeds/) · [WHOIS](https://www.deepinfo.com/data-api/apis/whois-lookup/)

2B+ subdomains

Subdomains discovered and resolved to the IP addresses they point to.

[Subdomain Finder](https://www.deepinfo.com/data-api/apis/subdomain-finder/) · [Feeds](https://www.deepinfo.com/data-api/feeds/)

200B+ DNS records

Every observed DNS record, kept with its history, so infrastructure can be traced back in time.

[DNS Lookup](https://www.deepinfo.com/data-api/apis/dns-lookup/) · [DNS History](https://www.deepinfo.com/data-api/apis/dns-history/) · [Reverse IP](https://www.deepinfo.com/data-api/apis/reverse-ip/) · [Reverse MX](https://www.deepinfo.com/data-api/apis/reverse-mx/) · [Reverse NS](https://www.deepinfo.com/data-api/apis/reverse-ns/)

30B+ SSL certificates

Certificates collected and indexed. The names a certificate covers often reveal hosts nobody announced.

[SSL Lookup](https://www.deepinfo.com/data-api/apis/ssl-lookup/)

Query it

One REST API over the whole index: lookups, reverse lookups, history, discovery and vulnerability search.

[Data & API](https://www.deepinfo.com/data-api/) [Deep Search & Insights](https://www.deepinfo.com/platform/dsi/)

Request

curl:

```bash
curl "https://api.deepinfo.com/v1/lookup/dns?domain=deepinfo.com&type=A,MX" \
  -H "apikey: $DEEPINFO_API_KEY"
```

Python:

```python
import os, requests

r = requests.get(
    "https://api.deepinfo.com/v1/lookup/dns",
    params={"domain": "deepinfo.com", "type": "A,MX"},
    headers={"apikey": os.environ["DEEPINFO_API_KEY"]},
)
print(r.json())
```

JavaScript:

```javascript
const r = await fetch(
  'https://api.deepinfo.com/v1/lookup/dns?domain=deepinfo.com&type=A,MX',
  { headers: { apikey: process.env.DEEPINFO_API_KEY } }
)
console.log(await r.json())
```

Response

200 OK · application/json

```json
{
  "fqdn": "deepinfo.com",
  "requested_types": ["A", "MX"],
  "responses": [
    {
      "type": "A",
      "conn_status": "success",
      "rcode": "NOERROR",
      "values": ["104.26.10.21", "104.26.11.21", "…"],
      "raw": "deepinfo.com. 300 IN A 104.26.11.21\n…",
      "server": "8.8.8.8"
    },
    {
      "type": "MX",
      "conn_status": "success",
      "rcode": "NOERROR",
      "values": ["1 aspmx.l.google.com", "5 alt1.aspmx.l.google.com", "…"],
      "…": "…"
    }
  ],
  "servers": ["8.8.8.8"],
  "check_date": "2026-09-22T12:25:59Z"
}
```

### [Cyber Threat Intelligence](https://www.deepinfo.com/platform/cti/)

#### Some of It Is Already Out There.

Breach dumps, infostealer logs, dark web forums and markets. The platform reads them for your domains, your employees and your customers, and ties each finding to a device, an account or a person your team can act on.

Some of what it watches

#### [Employee Email Breaches](https://www.deepinfo.com/platform/cti/employee-email-breach-monitoring/)

Which corporate addresses appear in which breaches, and what leaked with them.

#### [Compromised Employee Devices](https://www.deepinfo.com/platform/cti/compromised-employee-device-monitoring/)

Infostealer infections on machines that hold your credentials and session cookies.

#### [Compromised Client Credentials](https://www.deepinfo.com/platform/cti/compromised-client-credential-monitoring/)

Your customers’ logins to your services, found in stealer logs, with the service each one opens.

#### [Dark Web Mentions](https://www.deepinfo.com/platform/cti/dark-web-mentions-monitoring/)

Your brands, domains and people named on forums, markets and leak sites.

#### [Threat Actor Intelligence](https://www.deepinfo.com/platform/cti/threat-actor-intelligence/)

Who targets your region and industry, with the CVEs and tools they use.

[Explore Cyber Threat Intelligence](https://www.deepinfo.com/platform/cti/)

### Every Finding Gets a Score, an Owner and a State.

Vulnerabilities are ranked with CVSS, EPSS and CISA KEV together, so the top of the list is what attackers are most likely to use. Each issue then moves from state to state until a rescan confirms it is gone. If the signal comes back, the issue reopens by itself.

Around each issue

#### Notifications

New, reappeared and changed findings, delivered instantly, hourly, daily, weekly or monthly.

#### Reports

From the executive summary to issue detail, as PDF, on demand or on a schedule.

#### Compliance Mapping

Each issue classified against OWASP, PCI DSS, HIPAA, CWE, CAPEC and WASC.

[How the platform works](https://www.deepinfo.com/platform/how-it-works/) [Integrations](https://www.deepinfo.com/integrations/) [Methodology](https://www.deepinfo.com/methodology/)

In use

10,000+

organizations work from Deepinfo data, on the platform and through the API. Banks, airlines, telecom operators, defense manufacturers, public institutions and security vendors among them.

[Customer stories](https://www.deepinfo.com/customers/)

### Start With Your Own Record.

A scoped walk-through of the Deepinfo Platform, run against your own domains.

[Request demo](https://www.deepinfo.com/request-demo/) [Talk to the data team](https://www.deepinfo.com/contact/?topic=data-api)
