Perimeter: subdomains, ports, IP intelligence and lookalike domains

A perimeter rarely shrinks. It grows with every campaign, every vendor and every project nobody switched off.

Buteo discovers the subdomains your domain publishes and checks which of them point at services that no longer exist, the classic case where a dangling CNAME lets somebody else claim the address and serve whatever they like from your brand. It observes which ports are reachable from outside and what they announce. It resolves which IP ranges and which operators your infrastructure belongs to, which is how you discover that half of what you thought was hosted in one place is somewhere else. And it looks for domains registered by third parties that resemble yours, usually the first visible step of a fraud campaign.

What Buteo audits

• ✓Subdomain discovery from what is published
• ✓Dangling CNAMEs and the risk of third-party takeover
• ✓Reachable ports and the services they announce
• ✓IP ranges, ASN and associated operators
• ✓Lookalike domains registered by third parties
• ✓Known-vulnerability lookup, subject to explicit opt-in