The Observatory
Free, browser-based instruments we point at the threat sky. Scan a domain's security posture, validate a detection rule, watch for certificate abuse, and fuzzy-hash malware. No install, no cost.
Free membership · no credit card · sign in to run any instrument
Four instruments, one login
Sign in to run any of them. They stay free.
Unified Scanner Members only
Grades any domain or IP on its DNS records, TLS and certificates, HTTP security headers, RDAP registration, and hosting. Optional rendered screenshot.
Rule Validator Members only
Checks the syntax of YARA-X and Sigma detection rules entirely in the browser. Nothing you paste ever leaves your machine.
CelesTLSH Members only
Fuzzy-hashes a sample with TLSH in your browser, then matches the digest against a corpus of known malware to surface near-duplicates and new variants. The file never leaves your machine.
Intel Feed Members only
A shared, searchable feed of brand-impersonating certificates pulled from public Certificate Transparency logs. Early warning before phishing lands.
Sign in to open the dome
The instruments are free. Membership just keeps them fair to run. Create an account in under a minute and every tool above is yours.
No credit card · free forever · unsubscribe anytime