SUBDOMAIN LENSPassive Attack Surface Discovery

Privacy Policy

How Subdomain Lens protects user privacy, enforces automated data deletion, and restricts data sharing.

Automated 24-Hour Purge

Subdomain Lens does not maintain permanent archives of scan results. Every scan record, along with discovered subdomains, DNS records, and HTTP observations, is automatically deleted 24 hours after creation.

No Public Indices or Directories

We do not publish searchable scan directories, trending domain lists, or recent activity feeds. Scans are identified only by cryptographically unguessable UUIDs and protected by private access tokens.

Network Observability Notice

When performing a scan, authoritative DNS nameservers and destination web servers on ports 80 and 443 will observe inbound requests originating from our scanning infrastructure.