Continuous passive assessment
Recheck your public exposure.
Ownership-verified discovery, non-intrusive checks, AI analysis and weekly rechecks. This assessment does not execute exploits or replace a penetration test.
For network test scope and engagement coordination, visit PhishRoot PenTest. Hands-on tests are delivered by PhishRoot testers, by quote.
Yuna Kim · Security Researcher
Continuous testing
Transcript
[Yuna, generated presenter audio, 92% speed] PhishRoot continuous testing reviews public domain signals after ownership verification. Scheduled checks stay passive; no live exploits are launched.
- 01
Discover
Discover candidate subdomains from public certificate records and common names; a run assesses up to eight assets.
- 02
Test
Each live asset is checked for email spoofing, TLS, security headers and software with known exploits.
- 03
Analyze
The AI analyst prioritizes observed signals and suggests potential attack paths. These are hypotheses, not demonstrated exploitation.
- 04
Report & re-test
A report lands in your workspace instantly, then the whole program re-runs every week and shows what changed.
Testing is non-intrusive: PhishRoot reads public records and your sites' public responses, and the AI reasons about how an attacker would chain what it finds. It never launches live exploit attacks against your systems. Only test domains you own or are authorised to test.