ThinRecon — a free outside-in scan of your business.

Enter your work email. We'll scan the domain in your email and send the report back — no logins, no agents on your systems.

Your work email

We'll scan the domain in your email — e.g. acme.com if you enter you@acme.com.

Check your inbox

Open your business email — we sent a confirmation link from recon@thinsky.com to your address. Click the verify link in that email and your live ThinRecon will open here automatically.

Don't see it? Check your spam or promotions folder.

By clicking, you authorise ThinSky to scan the public information about your domain. We log the IP, browser, and timestamp.

Your name (optional)

Send me the monthly ThinSky briefing — one email a month, unsubscribe anytime.

What we look at

The public listing of your domain — the addresses people use to reach you and to send you mail.
Your website's security certificate — the padlock in the browser bar.
The visible building blocks of your site — the platform it runs on, payment widgets, analytics tags.
Anything your services accidentally publish — to anyone watching the open internet.

We never log in. We never touch a private system. Everything in the report comes from publicly visible data.

Tier 2 · free while we onboard

Want authorised active reconnaissance of the same domain?

httpx, nmap, subfinder, sslyze, nuclei, katana, gau, and trufflehog — orchestrated by our reasoning model. We test your own email domain; nothing runs until the authorising officer clicks the link we email them. Proof-of-vulnerability only.

→

Sample report

See what your report will look like.

A full external exposure assessment — findings, evidence, severities, and remediation guidance — sanitised end to end. Every identifier replaced; the format and depth are exactly what lands in your inbox.

→

Looking at what's public about your domain from the open internet — under a minute. Your report will appear below and we'll email you a copy too.

ThinRecon · Live Scan Fig. 03 · ThinSky

your-domain.com

Reading your domain, live.

0 / 4 signals

DNS & email signalsdns Queued
Web & TLSweb_ssl Queued
Tech-stack fingerprinttech_stack Queued
Public infrastructurepublic_infra Queued

ThinSky · Toronto · Vancouver · Montreal Public-data only

We're finishing the last few checks. Your report will land in your inbox within a couple of minutes — you can close this tab whenever.

One of the four checks is still being wired up. The other three are complete and your report is ready below.

We've also emailed you a copy of this report. Reply to that email, or write to inquiry@thinsky.com — we read every reply.