01
Map every external dependency
A headless audit follows script trees, tag-manager calls, pixels, CDNs, and third-party domains across your site.
Autonomous web-risk intelligence
Find the code everyone forgot.
OrphanSignal continuously finds abandoned scripts, dangling DNS, and retired vendor tags—then turns each signal into a clear security or performance fix.
Public-surface scan. No credentials or social login required.
What to expect
Passive by design
Public-surface analysis without attempting exploitation or claiming abandoned assets.
Evidence, not noise
Every alert carries the affected endpoint, detection evidence, confidence, and likely impact.
No community layer
No feeds or crowdsourcing—just automated telemetry delivered to the people who can act.
Detection pipeline
One crawl. Four actionable layers.
OrphanSignal builds a dependency map, validates what is still alive, scores the exposure, and packages the fix. Your team starts with the finding—not a pile of raw requests.
02
Catch takeover paths
OrphanSignal flags dangling DNS and CNAME records that still point to deprovisioned services before someone else claims them.
03
Measure dead-code drag
See which retired vendors and timed-out tags add latency, hurt Core Web Vitals, or create unnecessary requests.
04
Move from finding to fixing
Prioritized reports explain the affected endpoint, evidence, business impact, and recommended remediation—including cleanup patches where available.
Monitoring plans
Start with a scan. Keep watching what changes.
Straightforward coverage for one site, a growing portfolio, or a security program.
Snapshot
$0
One public-domain baseline scan
- Script and vendor inventory
- DNS exposure summary
- Performance drag overview
Continuous coverage
Watch
$79/month
For security, web, and growth teams protecting one production domain
- Daily dependency checks
- Dangling DNS alerts
- Zombie tag and latency scoring
- Prioritized remediation reports
- Email and webhook delivery
- 90-day finding history
Fleet
Custom
For multi-domain portfolios and security research workflows
- Portfolio-wide monitoring
- API and export access
- Custom cadence and retention
- Cleanup workflow support
Questions
Know what the scanner does
Your first signal
See what your website still calls after everyone stopped looking.
Run a public-surface scan and get a prioritized view of abandoned dependencies, takeover exposure, and dead-code drag.