Skip to content
EN
Sign inCreate account
External attack surface management and CAASM

See your company the way attackers do.

Hydra maps everything you expose to the internet, reconciles it with what you believe you own, and tells you what to fix first.

Create accountSee how it works

Scans only domains you verify.

Risk score
Down 11 this quarter
Assets
1,284
Shadow
23
Critical
4
Fix first
  • Critical
    Citrix NetScaler exploited in the wildvpn.cordillerapay.com
    KEV
  • Critical
    Dangling CNAME takeoverpromo.cordillerapay.com
    F-1051
  • Critical
    Exposed .git directoryapi-staging.cordillerapay.com
    F-1038
  • High
    RDP exposed203.0.113.40
    F-0997
Illustrative view. Cordillera Pay is a fictional customer; figures are examples.

One inventory, two views

What the internet sees. What your systems know. And the gap between them.

EASM · Outside in

Discover everything exposed

  • Subdomains, IPs, services, web apps and certificates found continuously
  • Forgotten staging, shadow IT and dangling DNS records
  • Look-alike domains and secrets exposed in public code
  • Leaked credentials Coming soon

CAASM · Inside out

Know what you own and who owns it

  • Compare what's discovered with the inventory you import, never assuming ownership
  • Connectors for AWS, Cloudflare, Entra ID, CrowdStrike and your CMDB Coming soon
  • Query everything in one graph and route fixes to the right team

The reconciliation that matters

Illustrative example from a mid-size fintech.

1,261
Matched
23
Shadow, unknown to you
169
Internal only

Built to be acted on

From a list of problems to a short list of fixes.

Continuous discovery

Continuous monitoring on your plan's schedule, passive DNS and certificate sources, and the fix verified on the next scan.

Asset graph

See how a domain connects to an IP, a service and a finding, with the evidence for each link.

Prioritized by real exploitation Coming soon

CISA KEV, EPSS and public exploits push what attackers use to the top, not just the highest CVSS.

Fix workflow

States, owners, SLAs, Jira, ServiceNow or Linear tickets, and Slack, Teams or webhook alerts.

AI analysis

Any exposure can be analyzed with AI from its evidence, cited and reviewable. The conversational analyst and generated reports are coming soon.

Brand and leaks

Look-alike domains and secrets in public code. Takedown tracking is coming soon.

How it works

Your first map in about ten minutes.

  1. 01

    Verify your domain

    Add a DNS record or upload a file. Hydra never scans what you have not proven you own.

  2. 02

    Hydra maps the surface

    Subdomains, services, certificates and technologies, with the context of each link.

  3. 03

    Add your inventory

    Import your inventory to separate unknown assets from known ones. Native connectors are coming soon.

  4. 04

    Fix what matters

    A ranked list, an owner and a ticket for each issue, and the fix verified on the next scan.

AI you can check

Ask. Get an answer with receipts.

AI analysis uses only your organization's evidence and cites what it used. Anything it estimates is marked as estimated. It's off until an organization owner allows it.

  • Every claim links to the evidence behind it
  • Secrets and emails are masked before reaching a model
  • Your data is not used to train models

Which shadow assets should I worry about first?

Queried asset graphReviewed the evidence

Three deserve attention today. promo.cordillerapay.com has a dangling CNAME an attacker can claim 1 api-staging exposes its .git directory and has no owner 2 beta-portal appeared 3 hours ago and is not in your CMDB 3

Coming soon The conversational analyst is coming soon

Integrations

Plugs into the tools you already run.

  • Jira
  • ServiceNow
  • Linear
  • Slack
  • Microsoft Teams
  • Microsoft Entra ID (SSO)
  • Webhooks and API
  • AWS Coming soon
  • Cloudflare Coming soon
  • CrowdStrike Coming soon
  • PagerDuty Coming soon

Built to be trusted

Security tools should be held to a higher standard.

Scans only what you verify

Ownership proof is required before any domain is scanned.

Honest reports

Every report states what it does not cover, so a clean result is never overstated.

Least privilege

Integration credentials are stored encrypted and never returned in a response.

Audit trail

Every change, key use and AI action is logged and exportable.

Single sign-on

SSO (OIDC) on the Premium plan, with roles per organization.

Two-step verification Coming soon

For your whole team.

Pricing

Choose your plan. Grow when your surface does.

Standard

$350/mo

For teams starting to watch their external surface.

  • 5 verified domains
  • 50 scans a month
  • Daily monitoring and active re-scans of what changed
  • 3 organizations
  • 3 members included per organization; each extra member $50/month (up to 25)
  • 5 integrations: webhooks, ticketing and chat
  • 2,000 external intelligence lookups a month
  • 50 internal inventory imports a month (CAASM)
  • 100 AI exposure analyses and 20 analyst questions a month
  • Reports in English and Spanish (Markdown and Word)
  • Scan data kept for 365 days
Premium

$700/mo

Everything in Standard, for security teams and consultants.

  • 25 verified domains
  • 200 scans a month, with queue priority
  • Unlimited organizations
  • 10 members included per organization; each extra member $50/month (up to 100)
  • 25 integrations
  • 10,000 external intelligence lookups a month
  • 1,000 inventory imports a month
  • 500 AI analyses and 100 questions a month (50 answered right away)
  • White-label reports
  • Single sign-on (SSO, OIDC)
  • Configurable data retention

Prices in USD a month. No trial: scanning starts once Hydra confirms your first payment. You choose to be billed on the 15th or at month end.

Questions

Before you ask.

Is this a vulnerability scanner?

Hydra starts from the outside, like an attacker, and discovers what is exposed. It then goes further by reconciling that with your inventory and tracking the fix, which a scanner alone does not do.

Do you read our source code or need agents on our servers?

No. Discovery is external and black-box. Integrations are optional.

Can I scan any website?

No. You must prove you control a domain before Hydra scans it. This protects you and everyone else on the internet.

Is the report available in Spanish?

Yes. Reports are available in English and Spanish.

Can consultants manage several clients?

Yes. One account manages several organizations, and the Premium plan includes white-label reports. A dedicated partner console is coming soon.

Find what you did not know you were exposing.

Add a domain and see your first map in minutes.

Create accountView pricing