crt.scout API docs certificate transparency lookup
Find every known subdomain.
Query certificate transparency logs through a fast, clean interface. Discover your public attack surface in seconds.
try /
One request
POST a domain and get normalized, unique hostnames back.
Full context
Total results, apex domain, and fetch time included.
Built for tools
Use /api/subdomain in scripts and workflows.