exposure · severity high
Subdomain takeover
Share of domains with at least one subdomain whose dangling record is a takeover candidate.
Measured every Saturday · last updated
How it is measured
Tier 1. Subdomain enumeration (CT + DNS) plus dangling-target analysis, via one cached DomainAPI call per domain. Denominator: any, on a capped subset (heavy).
Why it matters
The archetypal quiet failure — a CNAME left pointing at a cancelled SaaS account. Nothing is broken, nothing alerts, and anyone who registers that account now serves content on your domain, with your name and often your cookies.
The base rate
Two independent populations. The global, domain-anchored figure is unbiased; the company-anchored figures are built by matching company names to domains and skew toward more digitally-mature firms. Both are published, so the gap is visible.
By company size band
Company-anchored cuts (national registries with a size proxy), split by size band. Right-hand figure is the share not meeting the control.
Every segment
Pick one to see the citable answer for a company like yours, with its trend and methodology.
Show the remaining 62 segments
From the newsletter
Where this base rate turned up as a real, fixable exposure.
Slices below 100 measured members are withheld rather than shown with a wide interval — an absent country or issuer means too little data, not zero failures. Licensed CC BY 4.0. Machine-readable data per segment: append .json or .csv to its URL.