Review discovered subdomains

Inspect discovery evidence, current hosts, and exports.

Inspect discovered hosts

  1. Open Asset Intelligence → Subdomains for the organization, or open Subdomains on a domain asset.
  2. Apply search and asset filters as needed. Check the owning asset on the organization-wide list.
  3. Inspect the discovery indicator to see the source, first and last observation times, and available evidence.
  4. Distinguish a discovery candidate from DNS confirmation. Certificate names, website links, and search evidence can suggest a host before DNS verifies it.
  5. Enable Include historical when investigating hosts no longer observed in current DNS.
  6. Open the associated findings or recent-event count to investigate changes. Use the CSV export when you need the visible-in-plan inventory outside the app.
Subdomains inventory with verification and monitoring counts
Review the discovered host, verification state, and related inventory counts. The image shows the first rows. Select the image to enlarge it and inspect the details.

Expected outcome

You can identify current hosts, explain how they were discovered, and retain a scoped export. Historical hosts remain evidence rather than disappearing silently. Plan limits can restrict the monitored inventory; exports do not bypass those limits.

Discovery draws on DNS verification, certificate observations, and bounded web discovery. It is not an exhaustive crawl. Service-owner labels such as DKIM records belong in DNS evidence rather than the host inventory.

Screenshot

Scroll to inspect the image, or choose Fit image to see the whole screen.