SubfinderPassive subdomain intelligence

Search a local index of observed hostnames without probing the domain you ask about.

Search an exact apex

Plain text, JSON, provenance records, and bounded cursor pages read the same local index.

Explore the API

Certificate transparency, registry zones, public artifacts, and optional account-backed enrichment each have explicit ingestion paths.

View sources

Operate the Compose service or follow the separate Cloudflare migration architecture and publication controls.

Read operations

New operator: start the Compose service and check the operating limits.
API consumer: use the search, records, batch, and MCP contracts.
Ingestion maintainer: review the source catalog and ingestion commands.
Cloudflare migration: follow the Worker and catalog generation guide. Its staging and production steps are distinct.