Talon

Working

Passive security scan of a domain. Free surface scan, no login.

Runs in the browser1 checkDeveloper utilities

Open TalonChecked 2 days ago

What stands out

Taken from the page and the access facts we recorded. Nothing here is guessed.

run a passive security scan on a domain
find exposed secrets and debug endpoints
No account required
Has a free tier

What we checked

A missing tick means we have not measured it. A red mark is a check that failed.

App accessible
The last check reached a working page.
Page rendered
The last browser pass found a page that rendered.
Screenshot kept
We captured a picture of the page.

Looked: 0
Opened: 1
Checks: 1
Watching: 0

Looked and opened count distinct browsers on this site, not verified people. Checks are requests we made. None of these come from the app itself.

Screenshot of Talon — Screenshot from our last capture

Evidence

Each bar is one request we made

Checks: 1
Working: 100%
Median response: 1178ms
Watching since: 2 days ago

Browser render check

Checked 14 hours ago in a real browser

1 page rendered

Pages loaded in a real browser, not just an HTTP request. Route discovery is best-effort — nav links not in the initial DOM are not followed. How we check

Activity

Watching since 2 days ago

Last content change: None seen yet
Unchanged for: 2 days
Certificate expires: in 82 days

We hash the visible text on every check, so a redesign registers and a rotating advert does not. An app that has not changed in a long time is not necessarily abandoned — but it is a fact worth knowing before you depend on it.

What it does

Talon runs six read-only checks on a domain: security headers, certificate transparency, GitHub credential scanning, indexed file exposure, debug endpoints, and client-side code. You submit a domain and email; findings go to a PIN-protected report URL. The surface scan is free; a $9.99 per month price is listed.

What people say

No reviews yet.

We would rather show none than invent them.

Embed this status

Put it in your README. It updates itself every time we check, and links to your verification record — evidence a stranger can read, not a page selling them something.

[![Talon — still works](https://itstillworks.cruscible.com/api/badge/talon)](https://itstillworks.cruscible.com/verify/talon)

Others like this

Each of these answered on its most recent check.