Find your exposed assets
Bring together domains and services visible from the Internet.
Attack surface management
DataShield by rootzero
Inventory of Internet-exposed services
DataShield inventories what is exposed on the Internet under your name: subdomains, services, cloud storage, lookalike domains. It tells you when something changes.
For IT leaders and teams responsible for several domains or environments.
Decisions your team can make
See what changes
Identify new exposures and differences worth investigating.
Act on alerts
Use context and severity to guide your checks.
01In short
The official inventory often misses a staging environment, a bucket or an old subdomain. DataShield starts from your domains, finds what actually answers and ranks findings by severity.
- Frequency
- Daily scan
- Alerts
- Microsoft Teams, email
- Reporting
- Dashboard and consolidated report
- Getting started
- Free discovery scan delivered within 48 hours
Your external exposureexample.com
api.example.com vpn.example.com files.example.com staging.example.com
An exposure to investigate.
Accessible storage · archived evidence · recommended fix
02How it works
What DataShield does, step by step.
-
Discovery
Subdomains, IP addresses, exposed cloud storage and public code repositories tied to your domains.
-
Daily monitoring
Ports, services, known vulnerabilities, certificates and admin interfaces, checked every day.
-
Prioritisation
Dashboard by severity, Teams and email alerts, consolidated report, analyst on request.
-
Brand impersonation
Lookalike domain detection and monitoring of your SPF, DKIM and DMARC records.
Use cases and deliverables
When to choose this product
- Find services missing from your current inventory.
- Review Internet exposure after an acquisition or supplier change.
- Spot a newly exposed service before it is forgotten.
What you receive
- An Internet-facing asset inventory for the agreed scope.
- Contextual findings ranked by severity.
- Alerts on changes that need investigation.
03Questions
Frequently asked questions
Who makes DataShield?
DataShield is a rootzero product. It is designed, built and run by the rootzero team in France.
How do I get started?
Free discovery scan delivered within 48 hours. Write to us to arrange the setup.
What should I prepare for the first conversation?
Bring your main domains and the organisations involved. A demonstration helps define scope and monitoring arrangements.
How do I get a proposal?
Describe your needs and scope. We agree arrangements, schedule and price with you before any commitment.
Further reading
The method, open to inspection.
Our public research and guides on these topics: the mechanisms, the evidence and the limits of each analysis.
Technical guide
Attack surface mapping: CT logs, forgotten assets and typosquats
Certificate Transparency, forgotten staging servers, open cloud storage, typosquats, SPF/DKIM/DMARC: what an attacker sees of you before you do.
Analysis
A CVSS score is not a risk
CVSS measures technical severity and ignores your context. CVSS 3.1 and 4.0, EPSS, the CISA KEV catalogue: how to prioritise with data.
Evaluate DataShield on your scope.
Bring your main domains and the organisations involved. A demonstration helps define scope and monitoring arrangements.
Book a demo+Same house
The other rootzero products
- SpectrAIAutonomous web and API pentesting
Automated web application and API pentesting
- MailSentinelSuspicious email analysis
Suspicious email analysis
- BreachScanData leak monitoring
Data leak monitoring