No tool juggling
Instead of switching between SSL checkers, DNS tools, header checkers, browser DevTools, CVE searches and spreadsheets, Scantide collects the most relevant evidence into one readable flow.
What Scantide Online is for
This page is for checking public-facing domain hygiene: certificates, TLS, headers, DNS records, redirects, visible service signals, hosting context and related evidence. It is designed for responsible review, documentation and prioritization, not for intrusive testing. You do not need to be a penetration tester to understand the report — Scantide explains the findings in practical language.
What the scan can help explain
The report is useful because it connects technical findings to plain-language meaning. That makes it easier for site owners, IT teams and non-technical stakeholders to understand what needs attention.
TLS certificates
Shows certificate subject, names, issuer and expiry signals so you can catch misconfiguration, wrong names and certificates that need renewal.
HTTPS and TLS posture
Helps review whether the site presents secure transport correctly and whether older protocol or encryption signals deserve follow-up.
Security headers
Checks visible HTTP headers such as HSTS, CSP and frame protection, which help browsers reduce common web risks.
Redirect paths
Follows the visible route from the entered hostname to the final destination so unexpected forwarding can be documented.
DNS and mail records
Reviews DNS-related signals such as MX, SPF, DMARC, CAA and name records where available. These can affect mail trust, domain control and operational clarity.
Visible services
Identifies visible service and banner signals where the scan can safely observe them. This helps spot forgotten admin surfaces, unexpected web servers or exposed infrastructure.
Provider and jurisdiction context
Highlights hosting, cloud, ASN, country and provider clues that may matter for privacy, policy, compliance, procurement or sovereignty review.
Easy by design
Useful for experts, readable for everyone else.
Scantide is meant to reduce the gap between technical evidence and decisions. The products collect the clues, group them by meaning, and explain what a user, technician, auditor or manager should pay attention to next.
Explains the result
The report focuses on what was observed and why it can matter. That makes it easier to discuss findings with people who do not live in command-line tools every day.
Safe, visible checks
Scantide is built around observable signals and authorized review. It helps document exposure and context without trying to break into systems or exploit anything.
Why this matters for everyday users
A website can look simple on the surface while relying on many hidden services underneath. Scantide helps make those dependencies easier to see.
Cookies and browser behavior
Cookie attributes can affect privacy and session safety. Missing or weak attributes do not automatically mean abuse, but they are useful signs for review.
Scripts and third parties
Analytics, fonts, ads, chat widgets, payment tools and embedded media may involve outside providers. Knowing this helps explain who may be involved when a page loads.
Country and provider exposure
Hosting and mail providers can be relevant for legal, regulatory or customer-trust reasons. The scan provides context rather than making absolute legal conclusions.
Why Scantide?
One clear view instead of a pile of separate checks.
Scantide is built for people who need to understand websites, domains and authorized networks quickly without turning every review into a specialist investigation. It brings public signals, browser-visible behavior, infrastructure context, CVE clues, jurisdiction information and internal inventory gaps into readable evidence instead of scattered screenshots and raw tool output.
In plain English
Scantide helps explain what a website or authorized network exposes, who or what it depends on, and which findings deserve follow-up. It is not just a score. It shows the evidence behind the result.
In technical terms
Scantide combines TLS, DNS, mail, redirects, HTTP headers, visible services, scripts, cookies, third-party calls, provider ownership, ASN, country, CVE context and CMDB comparison where applicable.
End usersUnderstand trackers, cookies, scripts and background services without needing browser developer tools.
Technical teamsReplace repeated manual lookups with one structured evidence trail and cleaner remediation discussions.
AuditorsCollect explainable observations around certificates, headers, suppliers, jurisdiction and asset ownership.
ManagersSee what needs attention, why it matters and which product or team should handle the next step.
Scantide compared with the usual tool stack
Scantide does not replace every specialist tool. It gives you the first clear picture faster.
A skilled reviewer can gather similar fragments with many tools. The problem is time, consistency and explanation. Scantide connects the signals and turns them into something a normal user, technician, auditor or decision-maker can understand.
Other tools give fragments
SSL checkers, DNS tools, header scanners, DevTools, cookie viewers, CVE searches and provider lookups are useful, but each usually answers only one slice of the question.
Scantide connects the signals
Scantide puts the visible evidence together: certificates, headers, DNS, redirects, scripts, trackers, cookies, services, providers, countries, mail paths and ownership clues.
The result is easier to explain
Reports are written for follow-up. That makes it easier to talk with IT, privacy, procurement, audit, management and site owners without drowning everyone in raw output.
| Audience | Typical separate tools | Scantide starting point | Why it saves time |
|---|---|---|---|
| Everyday user | Browser extensions, cookie pop-up guesses, reputation sites, manual trust checks. | Observe or Observe Mobile | Shows trackers, scripts, cookies and contacted services in language that does not require security training. |
| Technical user | SSL Labs, securityheaders.com, dig/nslookup, curl, RDAP/WHOIS, DevTools, DNS/MX tools, CVE searches. | Scantide Online, Dashboard and Observe | Combines common web, DNS, TLS, header, infrastructure and browser-visible checks into one evidence flow. |
| Auditor or governance reviewer | Spreadsheets, supplier questionnaires, screenshots, manual DNS evidence, policy notes, asset inventory exports. | Auditor PowerShell, Auditor Android and Dashboard | Produces repeatable evidence, highlights ownership gaps, and supports privacy, procurement, NIS2-style and internal policy review. |
Shadow IT and CMDB visibility
Finding a host is useful. Knowing whether anyone owns it is where the real value starts.
Shadow IT is not always malicious. It can be a forgotten test server, an old appliance, a printer, a temporary VM, a vendor device, a lab system or a service nobody entered into the CMDB. The risk is that nobody patches it, monitors it, budgets for it or accepts ownership when something changes.
Discover what is actually there
Scantide Auditor can review authorized internal ranges and show reachable hosts, visible ports, web titles, banners, TLS clues and service evidence.
Compare against CMDB records
Auditor PowerShell supports CMDB/ServiceNow-style checks so discovered hosts can be compared against known assets, owners and inventory expectations.
Expose ownership gaps
The important finding is often not only an open service. It is that the service exists but is missing from inventory, lacks ownership or does not match expected records.
Why Shadow IT matters
Unknown or unmanaged assets can become blind spots for patching, backup, logging, access control, supplier review, incident response and compliance evidence. Scantide helps turn “we think this network is clean” into “here is what we actually observed.”
Where Android Auditor fits
Scantide Auditor for Android is useful during site visits and field checks, especially when reviewing nearby Wi-Fi or local network context. It complements the PowerShell workflow by giving quick on-site visibility before or after a fuller report.
Who Scantide is for
Different users, same problem: too many hidden signals and too little explanation.
The same evidence can be useful in different ways depending on who reads it.
End users
Understand why a website may feel noisy or privacy-heavy: trackers, cookies, scripts, forms, third-party hosts and infrastructure behind the visible page.
- Use Observe or Observe Mobile for websites you visit.
- Use Online Scanner when you want to check a public domain directly.
IT and technical staff
Reduce repeated manual checks and get cleaner triage around certificates, DNS, headers, services, redirects, providers, CVE clues and ownership gaps.
- Use Online and Dashboard for public-facing services.
- Use Auditor PowerShell for authorized internal network and CMDB comparison.
Auditors and governance teams
Get readable evidence for discussions about asset ownership, supplier exposure, mail routing, jurisdiction, security headers, certificate hygiene and inventory gaps.
- Use reports as supporting evidence, not as unsupported conclusions.
- Use CMDB gaps to guide follow-up with asset owners.
Managers and service owners
See what needs attention and why: expiry, weak browser protections, unknown third parties, unexpected hosting, unmanaged hosts or missing ownership.
- Use Scantide to prioritize action without reading raw command output.
- Use product-specific pages to decide the right workflow.
Deeper context
CVE and jurisdiction context
Scantide can help connect visible technical evidence with wider review context. These signals are useful for prioritization, but they should be treated as clues rather than automatic proof of compromise or non-compliance.
CVE-related signals
Where visible product names, versions, server headers, service banners or technology hints are available, Scantide can help compare that evidence against known vulnerability context. A possible CVE match should always be verified manually because headers may be hidden, outdated, misleading, backported or customized by the provider.
Server jurisdiction context
Hosting country, provider ownership, ASN, CDN usage, mail routing and external infrastructure can matter for privacy, procurement, regulatory review and data-sovereignty discussions. Scantide surfaces this context so teams can ask better questions, not so a country or provider is automatically treated as unsafe.
FAQ
Straight answers for users who want to understand what this scanner does and what the results mean.
Does a finding mean the website is malicious?
No. A finding means Scantide observed something worth understanding. Missing headers, many redirects, third-party services or unusual infrastructure can be legitimate, but they may still deserve review.
Can I scan any domain?
Use the scanner responsibly and only for domains you are allowed to review. Some domains may be disabled from scanning for hygiene or policy reasons.
Why are IP addresses not supported here?
This page is built around domain and hostname evidence such as certificates, DNS, headers and redirects. IP-oriented workflows fit better in Scantide Auditor.
Is this the same as Scantide Observe?
No. Scantide Online scans a submitted public domain. Scantide Observe runs in the browser and can see live page behavior such as scripts, cookies, trackers, forms and network activity during browsing.
Is Scantide an intrusive tool or a hacking tool?
No. Scantide is designed for visibility, documentation and authorized review. The products focus on observable evidence such as public website signals, browser-visible behavior, certificates, DNS, headers, infrastructure context and authorized internal inventory checks. Scantide does not try to exploit systems, bypass access controls, brute-force services or break into anything.
Do I need to be technical to use Scantide?
No. The tools are designed to be easy to start with: scan a domain, open the browser extension, share a URL to the mobile app, or run an authorized Auditor check. Technical teams still get useful evidence, but the wording and layout are meant to help non-specialists understand what the findings mean.
Where can I learn more about the full Scantide platform?
The Why Scantide page explains how the scanner, dashboard, Observe and Auditor tools fit together and where each one saves time.
Scantide product map
Which Scantide tool should I use?
Scantide is split into focused tools so the right audience gets the right kind of evidence quickly. Use Observe for live website behavior, Online for public domain checks, Dashboard for monitoring, and Auditor when you need authorized internal network visibility.
Observe browser extension
For Chrome, Edge, Brave and Firefox. Shows trackers, cookies, scripts, security headers, forms, contacted hosts and browser-visible website risk while you browse.
Open Observe guideObserve Mobile
For Android users who want to share a URL from a browser or app and understand website privacy, scripts, trackers, infrastructure and jurisdiction context on mobile.
Open Observe MobileScantide Online
For quick public-domain checks. Reviews visible TLS, DNS, headers, redirects, services, provider and jurisdiction signals for a website or domain.
Run single scanDashboard monitoring
For teams that need recurring certificate and domain visibility, status views, uploaded domain lists, expiry warnings and evidence history.
Open dashboard loginAuditor PowerShell
For Windows admins reviewing authorized internal networks. Finds reachable hosts, visible services, web responses, TLS clues, Shadow IT and CMDB/ServiceNow-style inventory gaps in clear HTML reports.
Open PowerShell AuditorAuditor for Android
For mobile field checks and quick local network visibility. Useful for Wi-Fi review, nearby network context, Shadow IT clues and on-site authorized infrastructure checks.
Open Android Auditor
Need help choosing or setting this up? Use the main manual or contact Scantide.