mlab docs

Custom Scan

Run advanced, recurring security scans on domains you own to detect misconfigurations, expired certificates, and exposure.

Run advanced, recurring security scans on domains you own. Detect misconfigurations, expired certificates, and exposure before attackers do.

Overview

Proactive monitoring

Don't wait for an incident. Continuously scan your own infrastructure to catch issues early.

Ownership verified

Only domains you've verified via DNS TXT record can be scanned. No abuse possible.

Configurable

Choose what to scan and how often. Tailor the scan profile to your needs.

Get started in 3 steps

Verify your domain

Add your domain in Infrastructure and verify ownership with a DNS TXT record. See the guide.

Configure your scan

Go to Custom Scan, select your verified domain, and choose your scan parameters.

Launch & monitor

Start the scan and review results in your scan history. All findings are saved to your account.

Prerequisites

You need a free mlab.sh account and at least one verified domain to use Custom Scan.

Go to Custom Scan

Launch a custom scan on a verified domain.

Verify a domain first

Prove ownership before scanning.

Phone Number Lookup

Validate a phone number in E.164 form and read its country, line type, originally allocated operator, canonical formats and scam-shape findings, all offline.

Security monitoring

Continuous watch of your verified domains and IP networks: the software each host runs, the known vulnerabilities that affect it, and alerts when something is found.

On this page

OverviewGet started in 3 stepsVerify your domainConfigure your scanLaunch & monitor