AISA CyberCon 2026 · 14 to 16 October · MCEC Request a snapshot
Premier ScruteX Partner

A free external exposure snapshot

What anyone can already see about your organisation, from its domain name alone.

Infostatus runs the reconnaissance a motivated attacker would, on the ScruteX platform, against your internet-facing footprint only. You get every finding with the evidence behind it, and a walkthrough with the Infostatus security engineer who ran it.

Request your snapshot What it covers

Free, non-intrusive and yours to keep. Nothing is installed, no one logs in, and you’re under no obligation to do anything with the findings.

yourcompany.com.au Example snapshot
├─ staging. Web server on an end-of-life version, unpatched since 2019 High
├─ j.@ Staff credential in an infostealer log High
├─ yourcompany-login.com.au Lookalike domain with a live mail server Medium
├─ _dmarc Policy set to p=none, so spoofed mail is delivered Medium
├─ github.com/ API key committed to a public repository High
└─ vpn. Certificate expires in nine days Low
Illustrative only. These aren’t real findings about any organisation.

Infostatus is a Premier ScruteX Partner. This offer is delivered by Infostatus on the ScruteX platform, and we’re making it together at CyberCon. Find us at the ScruteX stand, Melbourne Convention and Exhibition Centre, 14 to 16 October.

ScruteX AISA CyberCon 2026
Free
One snapshot per organisation, no obligation afterwards
Non-intrusive
Public sources and light discovery only. No logins, no exploitation, no load
5 days
From verifying your request to the report in your inbox
01

What the snapshot covers

Five areas, all visible from outside your perimeter.

Every finding carries its evidence and the date it was observed, so your team can check it without taking our word for it.

01

Attack surface

Subdomains and forgotten hosts, exposed services and admin panels, software with known vulnerabilities, and certificates that are expiring or misconfigured.

02

Leaked credentials and dark web mentions

Staff credentials in breach data and infostealer logs, and mentions of your organisation in dark web forums and access-broker listings. Usernames are masked in the report and passwords are never shown.

03

Exposed data and secrets

API keys and tokens in public code repositories, open cloud storage, and sensitive documents that search engines have indexed.

04

Brand impersonation

Lookalike and typosquat domains, which of them have live mail or web servers, and social profiles or apps pretending to be you.

05

Email authentication

Your SPF, DKIM and DMARC setup, whether your domain can be spoofed today, and the changes that fix it, in the order to make them.

Not included

Your internal network, endpoints and cloud consoles, and any attempt at exploitation. If you want exploitability validated, that’s a separately scoped and authorised engagement, and we’ll only raise it if you ask.

02

Who delivers it

Delivered by Infostatus, on the ScruteX platform.

Infostatus runs the snapshot, writes the report and walks you through it. ScruteX is the platform underneath, and the partnership is why the offer exists.

Security analysts reviewing findings on screen
Premier ScruteX Partner

Your provider, from the stand to the fix

Infostatus is a Melbourne cloud and cybersecurity consultancy and a Premier ScruteX Partner. Infostatus runs your snapshot, verifies the request, writes the report, and an Infostatus security engineer takes you through it, ranking the findings by what’s actually reachable and setting out the fixes in the order to make them.

If you want help closing them, Infostatus scopes and quotes the work as a fixed price. If you’d rather fix everything yourself, the report gives your team what it needs.

Team reviewing an exposure report together
ScruteX

The reconnaissance an attacker would run

ScruteX is a continuous threat exposure management platform: external attack surface, leaked credentials and dark web monitoring, brand impersonation and automated red teaming, all from the outside and all without an agent.

The snapshot is a single run of that platform against your domain, operated by Infostatus as a Premier Partner. If you’d like the next new subdomain or leaked credential to reach you first, Infostatus can keep it running continuously.

Attackers already have this view of you. Now you do too.
03

How it runs

Ten minutes at the stand, a report five days later.

01

At the stand

About ten minutes

Give us your domain and we’ll show you a first look on screen, a handful of live findings, then book your snapshot before you leave.

02

Verify, then scan

Within one business day

We confirm the request by email to an address at the domain being assessed. The full scan runs only after you confirm. Nothing gets scanned on the strength of a business card.

03

Report and walkthrough

Within five business days

A prioritised report with evidence for every finding, and a 30-minute walkthrough with the Infostatus security engineer who ran it. The report is yours to keep.

04

Handling your data

Your data, handled the way you’d handle a client’s.

A snapshot turns up credentials and other personal information. Here’s exactly what happens to it.

Verified requests only

The report goes only to an email address at the domain that was assessed.

Credentials masked

Partial usernames and the source they appeared in. Passwords never appear in the report.

Nothing shared

Not with vendors, not with other partners, not with a marketing list.

Deleted on a schedule

Raw scan data is deleted 30 days after your walkthrough unless you ask us to keep it.

Request your snapshot

Book at the stand, or here.

Use your work email at the domain you want assessed, since that’s where the verification and the report will go. We’ll come back to you within one business day.

After the snapshot

Nothing is required of you. Plenty of teams take the report and fix everything themselves, which is a perfectly good outcome.

If you’d like help closing findings, Infostatus will scope it and quote a fixed price. If you’d like the next new subdomain or leaked credential to reach you first, we can keep the monitoring running.

Open to AISA CyberCon 2026 attendees. Requests close 31 October 2026. One snapshot per organisation. The snapshot, report and walkthrough are free and carry no obligation. The assessment is non-intrusive and limited to internet-facing assets associated with the verified domain.

Request a free snapshot

Under a minute to fill in.

Must be at the domain you want assessed.

Prefer email? Send your domain to connect@infostatus.com.au.