Digital footprint
See the assets, services, and hosting locations connected to every vendor.
See your vendors the way attackers do.
An outside-in view of each vendor's internet-facing exposure, read in the context of what that vendor means to your business.
OBSERVED PERIMETER / V-024wayneenterprises.com
WINDOW24HNETWORK PERIMETER47 ASSETS / 4 REGIONS
DOMAINPUBLIC ASSETOBSERVED SERVICE
An external perspective on every vendor.
Issues, not noise
Repeated findings are grouped into clear issues your team can investigate.
Reviewed in context
Confirm or dismiss a finding with the vendor relationship and business impact in view.
Straight to action
Raise a risk or request a fix directly from a verified external finding.
One process. Every layer connected.
Scroll to open the workflow, follow each stage, and see how context stays attached from start to finish.
- 01
Add the domain
Start with the vendor's primary internet domain.
- 02
Merqab looks from outside
The vendor's public-facing assets and exposure are collected.
- 03
Review and act
Triage findings, understand their context, and follow up.
Questionnaires show what vendors say. Scans show what's exposed.
- Built by offensive security practitioners.
- Findings are read the way an attacker would read them.
- External signals sit next to what the vendor tells you.