Instant Assessment
Cyber Risk Assessment: llms-full.txt
Instant passive reconnaissance results for llms-full.txt. No active probing — only public data sources.
Free Cyber Risk Intelligence
Get weekly domain risk updates
Stay ahead of cyber threats. We'll send you exposure score changes, new vulnerability alerts, and actionable security recommendations for domains you follow.
Share this tool
Help colleagues assess their cyber risk
About This Assessment
This instant domain assessment performs passive reconnaissance to show underwriters what attackers can see about a domain's internet-facing infrastructure. It uses only publicly available data sources and does not actively probe or scan target systems.
Data Sources: Certificate Transparency logs (crt.sh), Shodan (exposed services and CVEs), HTTP header analysis, and SSL certificate inspection.
URL format: Simply type resiliently.ai/example.com into your browser
to get an instant assessment for any domain. The shorter resiliently.ai/example.com and the longer resiliently.ai/scan/example.com both work.
Important: This tool is for authorized security assessments only. Do not scan domains without proper authorization. Results are cached for 24 hours.
Instant Results
Server-side scanning — results appear immediately, no waiting.
Passive Only
No active scanning. Uses only public data sources and APIs.
Risk Scoring
Get an overall exposure score with detailed breakdown and NIS2/DORA mapping.
Regulatory Context (NIS2 / DORA)
Security gaps identified by this assessment map to specific regulatory requirements. Missing security headers, SSL issues, and exposed services can create compliance risks under the NIS2 Directive and DORA regulation.
- Missing HSTS — NIS2 Art. 21(2)(d): Incident handling requires secure communications
- Missing CSP — DORA Art. 9: ICT risk management requires input validation controls
- Expired SSL — NIS2 Art. 21(2)(f): Cryptography and encryption requirements
- Information Disclosure — NIS2 Art. 21(2)(e): Data protection measures
- Exposed Services — DORA Art. 8: ICT risk identification and classification