How are you detecting the hosts in this report?

We pull the publicly facing DNS records for the provided domain. This means all hosts that are linked to the domain will be included in the scan. Watch our handy video on hosts.

As hosts are included in the DNS records, any vulnerabilities exploited on them by a malicious actor can affect the entire domain.

If a host is being detected by the scan is no longer active, the Insured can remove it from their DNS record to remediate the vulnerability and, therefore, drop it from the report. This is done outside of Upfort and requires some technical knowledge. Do not have the Insured attempt this if they are not familiar with the process.