See external exposure clearly before it becomes a problem.
Vivi Analyzer runs ten passive checks against a domain or IPv4 — DNS, TLS, headers, ports, mail auth, WHOIS — and returns a single snapshot with a transparent risk score. No accounts, no agents, no active exploitation.
What each scan actually checks
Ten analyzers run in parallel and merge into one result object. Everything is observable from the public internet — no authenticated probes, no body downloads.
Three modes, one snapshot
Pick based on how much of the surface you need today. All modes finish in under a minute.
A risk score you can audit
The 0–100 score is computed from observable findings — not a black-box model. Every +18, +8, or −8 on a result page is traceable back to the table on the right.
Findings and score deltas render inline with each result, so you can sanity-check the weighting and swap the table for your own rubric if the defaults don't fit.
Every re-scan compares against the previous
Each scan of the same target is compared against the previous one, stored locally in your browser. No server-side history.
Defensive by design, not by marketing
- Authorized targets only. Use against systems you own or have explicit written permission to assess.
- Pre-flight IP filter. Rejects private, loopback, link-local, and CGNAT ranges before any probe can fire.
- 10 requests per minute per IP. Best-effort sliding window on a cold-start serverless runtime.
- No bodies downloaded. Headers only; response bodies are never fetched or persisted.
- No server-side history. The last 10 scans live in your browser's localStorage and nowhere else.
Open the dashboard
No sign-up. No configuration. Works on any domain you're authorized to analyze.
Launch Dashboard