Four sources, one queue
Results from crt.sh, CertSpotter, passive DNS and live DNS lookups are merged and de-duplicated into a single list.
Pro Included in Pro and the 14-day Pro trial
Find every domain and host before someone else does.
Enter a root domain. TLINK PRO searches certificate transparency logs, passive DNS and live DNS, then puts everything it finds in a review queue so you decide what gets monitored.
demo · fictional data
org: northwind.example
Interactive demo, 2/4 · Review what discovery found
discovery_queue · 6 found · 2 flagged
3 selected
Use ← → or the buttons to move between steps. All data is fictional.
What you get
You approve what’s added
Nothing is monitored until you check it in the review queue. Add the hosts that matter and skip the rest.
Re-runs every day
Discovery runs again daily, so a new subdomain or certificate shows up in the queue without anyone remembering to look.
Why it matters
You can’t protect what you don’t know about
Forgotten staging servers, old campaign sites and test VPNs are rarely patched and rarely watched. Certificate transparency logs make them easy to find, for you and for attackers.
- Shadow IT and one-off projects
- Hosts left behind after a migration
- New certificates issued for your domain
See what’s out there under your domain
Discovery is included in Pro and in the 14-day Pro trial. No card needed.