Three production scanners — exactly the ones a logged-in tenant runs in /aegis. No fake demo numbers, no pre-baked results, no "Acme Corp." Paste your apex domain and we hit Google's public DNS, the Certificate Transparency log corpus, and the CISA Known-Exploited-Vulnerabilities catalogue in real time. Results are yours. Nothing is logged.
Audits your email-authentication posture. We resolve the apex domain's SPF, DMARC, and MX records via Google's public DNS-over-HTTPS endpoint and report the verdict the same way Aria's Mail Shield does for a live tenant.
cisa.gov · rbi.org.inFinds domains that share certificate-transparency entries with your brand keyword — phishing kits, typosquats, and dev/staging exposures. Same data source as Aria's Identity Shield uses for takedown case workflows.
paypal · hdfcSearches the live CISA Known-Exploited-Vulnerabilities catalogue (the gold-standard list of CVEs being actively exploited in the wild). Match by vendor, product, or CVE ID. Same feed Aria's Threat Intel uses to prioritise patching.
Fortinet · Microsoft ExchangeEvery scanner above runs entirely in your browser — your domain query goes directly to a public API, the response renders here, nothing transits Aria's servers. We've designed it that way deliberately:
If you want to verify, open Chrome DevTools → Network tab while you scan. Every request is to one of the three public endpoints above. This is the standard you should hold every cybersecurity vendor to.
The full Aria platform (7 shields · CERT-In Annexure-II auto-draft · WhatsApp alerts · DPDP-aware compliance) lives behind a free Vidya tier. Or if you're BFSI / mid-cap and want a Hinglish synthetic-deepfake red-team drill, see Synthetic Shield.