External Attack Surface Management · Made in India

Know your attack surface before hackers do.

Zecurix Radar scans every public thing your domain exposes — TLS, email authentication, DNS, HTTP headers, open ports, dark-web breaches — and tells you exactly what needs fixing. Ships with a DPDP Act 2023 compliance signal report.

India-hosted, DPDP-aligned No agent to install INR pricing, no card for Free tier
The 6 scan vectors

Six angles of attack, one console.

Every Radar scan runs six independent vectors against your domain, then merges findings into one prioritised report with severity, evidence, and remediation.

SSL

SSL & TLS

Certificate expiry, weak protocols, hostname mismatch, cipher hygiene, self-signed detection.

  • Expiry < 30 days flagged
  • TLS 1.0 / 1.1 refused-should-be
  • Weak ciphers (RC4, 3DES)
MX

Email Security

SPF, DKIM, DMARC — the three-legged stool that stops your domain being spoofed.

  • Missing SPF → critical
  • p=none DMARC → high
  • DKIM selector probe (8 common)
NS

DNS Security

CAA, DNSSEC, zone-transfer, subdomain-takeover — the DNS-layer defences most orgs forget.

  • CAA missing → any CA can issue
  • AXFR open → zone leak
  • Dangling CNAME takeover risk
HDR

HTTP Headers

HSTS, CSP, X-Frame-Options, X-Content-Type-Options — the browser-side guard rails.

  • HSTS missing → MITM window
  • CSP missing → free XSS
  • Server banner leak
TCP

Port Exposure

Databases, admin panels, legacy plaintext protocols exposed to the public internet.

  • MySQL, Postgres, Redis, Mongo
  • RDP, FTP, Telnet
  • Elasticsearch (mass-ransomed)
DW

Dark Web

Employee credentials in third-party breaches. Powered by HaveIBeenPwned.

  • Breach names + affected count
  • Severity by exposure size
  • Continuous re-check on schedule
DPDP Act 2023 · Compliance signals

Downloadable DPDP compliance signal report.

Radar assesses eight DPDP-relevant controls from your scan data and generates a signed 4-page PDF. Not a legal compliance opinion — your DPO makes that call — but a methodology + evidence pack they can build on.

Each control cites the DPDP §-clause, the observed signal, and a concrete remediation step. Every scan, every domain, one click.

72
DPDP Score
Partial
Privacy PolicyFAIL
ConsentPARTIAL
Data MinimisationUNKNOWN
Breach NotificationFAIL
Data LocalisationPARTIAL
Grievance OfficerFAIL
Cross-borderUNKNOWN
Data RetentionUNKNOWN
Pricing · in INR

Start free. Upgrade only when you need more scans.

Every plan includes all 6 scan vectors + DPDP report. Difference is scan frequency + domain count + alerting channels.

Free
₹0
Perfect for solo founders and one-domain shops.
  • 1 scan per month
  • 1 domain
  • All 6 vectors + DPDP report
  • Email alerts on critical findings
  • Community support
Start free
Business
₹4,999/ month
Continuous monitoring for agencies + enterprise IT teams.
  • Unlimited scans
  • Up to 25 domains (+ addon packs)
  • Daily scheduled scans
  • Priority support
  • Team seats + role-based access
Choose Business

Ready to see your attack surface?

Sign up in 60 seconds. First scan runs in under 90 seconds.

Start free scan