New Features and Improvements - October 2023

Nicola Chapman
7 November 2023
4 min Read
Nicola Chapman
Create free account


October has been another busy one for the FractalScan Surface team, with even more data being added to our public API as well as summary report co-branding.

More discovery data available from the public API

Integrating FractalScan into your wider toolkit is a great way for your team to work more efficiently. We are committed to continuing to add more data and capabilities to make sure you get the most out of it. Last month we added the ability to get domain information from the API and this month we have also added endpoints for IPs, web presence and out of scope domains. Full details of the new endpoints can be found in our public API documentation.

These endpoints are available to all existing API users: those with Premium, Enterprise and MSP plans. Please contact us to discuss getting access to the API.

IP addresses

There are two new endpoints in the API. An endpoint for getting the count of IPs: IP count

And one for getting the IPs and their details:

IP count and details

This allows you to get all the following details for a scan:

  • IP address
  • DNS sources e.g. domains
  • Hosted services and TLS certificates
  • Hosting: ASNs, cloud regions, entities
  • Location information
  • Risk counts
  • Other characteristics: seeds, created and updated date-times

Web presence details

Similarly to IPs, there are two new endpoint for web presence data. Firstly, an endpoint to get a count of the web presence URLs for a scan:

Web presence in-scope count

Details of the web presence URLs found by each scan:

Web presence in-scope details

Similar to the Web Presence page in the app, the following details are available via the API:

  • The URL and domain
  • HTTP details
  • Details of redirects
  • Other web page attributes: third party components used, log in forms present, created and updated date-times

Out of scope domains

All of the other discovery data endpoints include details of in scope assets only. These next two endpoints provide data based on the out of scope domains identified by FractalScan. An overview of how FractalScan determines what is in and out of scope can be found here.

The out of scope domains are also presented as two endpoints. First, a count of the out of scope domains:

Out-of-scope domains count

Second, details of the out of scope domains:

Out-of-scope domain details

As FractalScan doesn’t fully explore the out of scope domains, less data is available for these domains than the in scope ones. When out of scope domains are requested for a scan, a list of the domains and the created and updated date-times are returned.

If you wish to add an out of scope domain into scope using the API, you can use the Add a seed to a scan by ID endpoint: POST /v1/scans/{id}/seeds

Summary report co-branding

For users who wish to share FractalScan results with others, e.g. MSP partners who are running FractalScan for their clients, or those scanning businesses in their supply chain, you can now co-brand the summary report.

You can upload your company logo in the organisation settings.

Co-branded logo upload screen

Once a logo has been uploaded, when you create a new summary report, by default this will be included on the report, but you can choose to opt out of this each time if necessary.

Generate co-branded report summary screen

Once your report has been generated, you will see your logo at the top of each page.

Branded report example

Resolved IPs for CNAMEs

When analysing DNS records for discovered domains, FractalScan will identify CNAME (canonical name) records, which are alias to other domains. They are typically used to map sub-domains to the domain actually hosting content, e.g. ’’ would have a CNAME record to ’'.

Previously, unless part of a seed domain’s infrastructure, we didn’t follow CNAME DNS records beyond the domain they were pointing to. Following user feedback, we’ve updated the app to follow CNAMEs further. In addition to the IP of the CNAME record, you can also see ASNs, IP ranges and cloud regions, allowing you to see where CNAME domains are hosted.

CNAME information dashboard

As well as on the domains page, this additional data is also reflected in the CSV export and the domains API endpoint.

As we will now be finding additional out-of-scope data related to CNAMEs, we’ve added the number of out-of-scope IPs and domains to the discovery stats widget on the dashboard. These appear under the existing counts, which continue to only include in scope data. We hope this will help you get a better idea of the scale of your attack surface.

Discovery overview widget

This new CNAME discovery data will be available in new scans, rescans or continuously running scans once they’ve been triggered.

Risk remediations in the Risks & Actions report

We’ve added the remediation steps into the risks tab of the Risks & Actions report, in addition to the actions tab. This gives people who don’t have access to the app an extra layer of data to work with.

Coming soon

  • Free FractalScan accounts to try out some of the key features before you buy.
  • Self-service upgrading of your FractalScan plan within the app.
  • Improved mobile user experience.
  • Better visibility of the domain & IP limits that are applied to your account.
About Nicola Chapman
Nicola is the Product Manager for FractalScan Surface, working closely with the Red Maple Technologies engineers to represent our customers' and users' needs. She has over 10 years product management experience building products to help solve real world problems for businesses.
Nicola Chapman


What our customers think