Free CVE API & SBOM Scanner — no account, no key. One lookup returns the whole cluster: CVE, GHSA, vendor advisories, exploit code, plus CNNVD, CNVD, BDU and JVNDB records most Western databases omit. Query by CVE, CPE, purl or keyword.
Free subdomain finder — no signup, no API key. Search 10 billion+ subdomains across 1 billion+ domains, including hosts behind Cloudflare that DNS brute-force and certificate logs miss. Find all domains associated with Bitrix or Grafana in seconds. Subdomain Center scours the web, gathering and interpreting data from across the Internet to map the world's shadow IT. Three engines: cuttlefish finds subdomains of a domain, octopus clusters a brand, and ammonites hunts a keyword across every host.
