Creators of the world's largest
Subdomain & Exploit Database

A.R.P. Syndicate builds and operates internet-scale intelligence datasets. Rather than reselling another vendor's feed, we run our own discovery infrastructure and publish the results through APIs that are free to query and priced flatly when you need them at scale.

Subdomain & Shadow IT Intelligence

Subdomain Center maps hosts across more than a billion registered domains. Discovery does not rely on DNS brute force — it combines web-scale crawling, real-time Certificate Transparency ingestion and embedding-based host correlation, which surfaces infrastructure that wordlists and certificate logs alone do not reach, including hosts sitting behind a reverse proxy.

In an independent benchmark, it returned more than twice as many valid subdomains as the next-best free source. The dataset is integrated into BBOT, theHarvester and OWASP Amass.

Vulnerability & Exploit Intelligence

Exploit Observer resolves the identifier sprawl around vulnerabilities. A single real-world flaw typically accumulates a CVE number, a GHSA advisory, vendor bulletins, exploit modules and entries in national registries — all describing the same thing. Our VEDAS system clusters them under one identifier, so a single lookup returns the complete picture rather than one fragment of it.

Coverage deliberately extends past the English-language advisory ecosystem to include CNNVD, CNVD, BDU (Russian FSTEC), JVNDB and EUVD — registries that publish independently of MITRE and that most Western vulnerability feeds omit entirely.

Vulnerability Management & Risk Scoring Platform

Kenzer is our vulnerability management and risk scoring platform, built on the same subdomain and exploit intelligence powering the two products above. It covers third-party risk management (TPRM), external attack surface management (EASM), continuous threat exposure management (CTEM), cyber insurance underwriting, and sovereign threat intelligence for CERTs and defense agencies — continuous reconnaissance in place of point-in-time surveys.

Physical Security Intelligence

Osprey Vision applies the same reconnaissance discipline to physical security: it ingests CCTV and drone feeds over a secure encrypted tunnel and clusters faces and objects in the cloud, with on-prem deployment available for sensitive environments. Faces are grouped by similarity, not identified, unless you supply your own reference set.

Procurement Intelligence

Tender Portal applies our crawling infrastructure to public procurement. It gathers open government tenders, RFPs and contracts from official portals in more than 100 countries, translates every notice into English, updates daily, and links each one back to the official portal where bids are submitted — one search in place of hundreds of national systems, with market views by country and sector. Browsing is free; Pro is $500/year and Enterprise starts at $1,000/year.

Consumer & Executive Device Security

EncryptLayer (ENCLAY) is one Android app with two tools. The firewall blocks stalkerware, spyware, banking trojans, cryptomining and infostealer malware on-device by IP, domain and TLS fingerprint, and detects tampering with the app itself — no root, no account, no cloud. The encrypted chat sends messages phone to phone over Tor onion services, or over Bluetooth when there is no internet, using Signal's protocol with post-quantum keys; there is no server, no phone number and no account, and contacts are added only face to face. Free for individual consumers. Business executives get Digital Executive Protection, from $1,000/year, built on the same on-device engine.

Offensive Security Services

Beyond our own products, we run Red Teaming, VAPT (vulnerability assessment and penetration testing) and similar offensive security engagements — the same reconnaissance and exploit intelligence behind Exploit Observer and Kenzer, applied directly against your environment by our team.

How access works

Both Subdomain Center and Exploit Observer are free to query with no account and no key, subject to result caps and rate limits. Paid keys remove those limits rather than unlocking different data — you can evaluate the full quality of either dataset before speaking to anyone. Both are queryable from the command line via puncia, our open-source CLI. Tender Portal is free to browse, with Pro and Enterprise plans for unlimited search and downloads. EncryptLayer is free on Android. Kenzer and Osprey Vision are enterprise products sold directly; register your interest below and our team will follow up.