A.R.P. Syndicate runs its own discovery infrastructure at internet scale and builds cyber assessment, national security, procurement intelligence and consumer security products on top of it, backed by an offensive security team and the Vulnpocalypse newsroom.
Free to query. Subdomain Center and Exploit Observer need no account and no API key.
Two flagship data products, two enterprise platforms and two security offerings, all built on infrastructure we run ourselves rather than a reseller’s feed.
The foundation. Free to query, flat pricing when you need scale.
The world’s largest shadow IT and subdomain intelligence database. Discovery does not rely on DNS brute force, so it finds hosts that wordlists and certificate logs never reach.
Vulnerability and exploit intelligence. VEDAS, our Vulnerability and Exploit Data Aggregation System, clusters the CVE, GHSA, vendor bulletins, national registries and exploit code for the same flaw, so one lookup returns the whole picture.
Sold directly. Built on the same intelligence, delivered as software.
A cyber assessment platform for your own estate, your subsidiaries and your suppliers. Continuous, evidence-based, and scored.
Face and object clustering for CCTV feeds, captured over a secure encrypted tunnel, in the cloud or fully on-prem.
On the phone, and against your own environment.
One Android app with two tools: an on-device firewall against stalkerware, spyware and banking trojans, and an encrypted chat with no server, no phone number and no account.
Offensive security engagements run by the team that builds the intelligence. We start from infrastructure already mapped and exploits already correlated, not from a blank scan.
Tender Portal is our procurement intelligence product. Public buyers publish tenders across hundreds of national and regional systems, each in its own language. We gather the open ones into a single English search, updated daily, and link every notice back to the official portal where you bid.
Built for exporters, bid and proposal teams, consultants and business development teams.
AI now finds bugs faster than anyone can fix them. Vulnpocalypse, the news and advisory site published by A.R.P. Syndicate, tracks every major exploited bug, supply-chain attack and breach, scores them live with VEDAS and EPSS, and tells developers what to patch.
Every product shares one intelligence core. Data we collect for one becomes signal for the others, which is why a free API, an enterprise platform and a newsroom can all be run by one team.
Our own crawlers and ingestion pipelines map the open internet: hosts, certificates, vulnerability registries, exploit code and public tenders.
VEDAS, the Vulnerability and Exploit Data Aggregation System, groups every identifier for the same flaw under one cluster and scores it for exploit maturity and likelihood of attack.
Kenzer applies that intelligence to a real organization: its code, its internet-facing assets, its suppliers and its leaked credentials.
Findings turn into patches, protected devices, offensive tests and published advisories that tell people what to do next.
Map attack surface and prioritize by real exploitability. Query the data free from the terminal, or through Subfinder, Uncover, BBOT and Amass.
Run continuous cyber assessments across your estate, your subsidiaries and your suppliers, with a score an underwriter can price against.
Sovereign threat intelligence and national-scale exposure tracking, with on-prem deployment for sensitive environments.
Find open government tenders and RFPs across 100+ countries in one English search, each linked to the official portal.
Understand who and what is on your cameras across sites, with faces clustered but never named by default.
Stop stalkerware, spyware and banking trojans on the phone, and message privately with no account and no server.
Free tiers return the same data as paid ones. A paid key removes limits rather than unlocking different data, so you can judge the quality before you speak to anyone.
| Product | Free | Paid | Model |
|---|---|---|---|
| Subdomain Center | Up to 500 results per query, no accountRandom order | $100/monthFull, sorted results | API |
| Exploit Observer | 5 requests per minute, no accountSame data as paid | $200/monthHigher rate limits | API |
| EncryptLayer | Free for consumers | From $1,000/yearDigital Executive Protection | App and license |
| Kenzer | Talk to us | From $5,000/year | Enterprise |
| Osprey Vision | Live demo on request | From $5,000/yearPer-camera pricing | Enterprise |
| Red Teaming & VAPT | Scoping call | Engagement-based | Services |
| Tender Portal | Free to browse | Pro $500/yearEnterprise from $1,000/year | Subscription |
| Vulnpocalypse | Free to read | Not applicable | Publication |
Subdomain Center and Exploit Observer are also available from the terminal with puncia, our open-source CLI. Need a custom dataset? Choose that option in the form below.
Tell us what you are working on and which product caught your eye. A person on our team replies with next steps, pricing or a demo.
