Subdomain Discovery API
Discover subdomains through Certificate Transparency logs, DNS enumeration, and wildcard detection. Find shadow IT, orphaned infrastructure, and unauthorized services across your domain portfolio.
What you can do
Real outcomes teams achieve with Subdomain Discovery
CT Log Discovery
Find subdomains by analyzing Subject Alternative Names (SANs) in SSL certificates from Certificate Transparency logs.
DNS Enumeration
Enumerate subdomains through DNS queries including common subdomain brute-forcing and zone transfer testing.
Wildcard Detection
Detect wildcard DNS configuration that affects subdomain enumeration and security assessments.
Infrastructure Mapping
Map discovered subdomains to their IP addresses, hosting providers, and technology stacks for complete visibility.
Simple Integration
Get started in minutes with our RESTful API, or connect via MCP and let your AI call these endpoints directly. Clean documentation, predictable responses, and comprehensive error handling.
- RESTful JSON API
- Global edge-delivered responses
- Comprehensive documentation
- 99.9% uptime target
- MCP-compatible — use with Claude, ChatGPT, or Gemini
const response = await fetch(
'https://api.edgedns.dev/v1/domain/ssl?domain=example.com',
{ headers: { 'Authorization': 'Bearer YOUR_API_KEY' } }
);
const { data } = await response.json();
// Extract unique subdomains from certificate SANs
const subdomains = [...new Set(data.unique_subdomains)];
console.log('Discovered subdomains:', subdomains);
// ["www.example.com", "api.example.com", "mail.example.com", ...]Related Endpoints
7 endpoints available for subdomain discovery
Real-World Use Cases
See how teams are using Subdomain Discovery in production
Put Subdomain Discovery to work — via API or AI
Start free with 200 requests/month. Call the API directly or connect your AI through MCP. Upgrade to Pro when you need private monitoring and higher limits.
No credit card required
Already have an account? Sign in