Continuous Assurance: Security & Facilities Watchdogsintermediate · ~95 min

The Subdomain You Forgot to Delete — Find Every DNS Record Still Pointing at Nothing

When a project ends, someone deletes the app and nobody deletes the DNS record — and that leftover record is a signed introduction letter, in your company's name, addressed to whoever claims that spot next. How would you find out that one of your own subdomains now serves a stranger's page?

This project builds you the list, the check, and the removal order, starting from the one source an attacker never gets to read — your own DNS zone.

🤝 Want this built for you? Start a request — our AI scopes it, estimates a price range, and matches you with a vetted AI Advisor. →

Two ways to open it

Just this build

$10 one-time

Unlocks this full walkthrough on your account — no subscription, and no account needed until you check out.

Best value Over 160 projects + the full course

$99 / year

Over 160 project walkthroughs, the 6-week course, and your certificate.

🔒 Secure checkout by Stripe · Already a member? Sign in

What you'll do

A weekly watch you built with Claude Code that reads the authoritative record list exported from your DNS provider, resolves every third-party target through two independent public resolvers, tests each name against fingerprints you personally observed and dated, and grades it OK, DANGLING, UNCLAIMED-LIKELY, REVIEW, or an honest UNKNOWN — with a saved cursor so only new findings ever wake you, plus a written decommission order that stops you creating the next one.