Concept
Defined passive external assessment scope: visibility without intrusion.
About
occhira | Public Exposure Scanner
occhira helps organisations understand external exposure before attackers do. We combine passive DNS, TLS, security headers, technology fingerprinting, and robots.txt checks into a report written for business owners and IT partners.
The product is in public MVP. Some capabilities on the roadmap are marked as In Development or Coming Soon.
01 / Roadmap
Product timeline
02 / Focus
What we ship
Live today versus items on the roadmap. No hidden premium tiers in MVP.
MVP
Exposure report
Structured findings with PDF export for stakeholders.
Live module
DNS & email
MX, SPF, and DMARC visibility.
RoadmapIn Development
Domain verification
Prove domain ownership when verification launches.
Live module
TLS & headers
Certificate and browser protection signals.
RoadmapComing Soon
Accounts & API
Saved scans and programmatic access.
Live module
Robots.txt
Public crawl rules and path visibility.
Verified ScanIn Development
Subdomain discovery
Included in Verified Scan. Becomes available after domain verification.
03 / Principles
Why we built occhira
VISIBILITY FIRST
You cannot reduce exposure you cannot see. occhira starts with what is public today.
NO INTRUSION
Passive checks only: no exploitation, no credential attacks, no red team tooling.
HONEST MVP
We label roadmap items clearly and do not sell features that are not shipped yet.
ACTIONABLE OUTPUT
Reports prioritise fixes your team can implement, written for owners, not log parsers.
Questions or feedback?
We are building occhira in the open during MVP. If you scan domains you are authorised to assess, we would like to hear what would make the report more useful for your team.
Contact us