Skip to main content
The fastest way in is a domain. Periphery finds every app tied to it: hostnames that contain it, pages that mention it, and pages with an email address on it.
1

Type a domain

In the search bar, type a domain such as acme.com and press Search. A pasted URL works too; subdomains and paths are stripped down to the registrable domain. See Domain search.
2

Read a result

Each result shows:
  • Hostname, the app’s address. Click it to open the app page.
  • Title of the page, or the hostname again when there is none.
  • Snippet of the page text with your matching words highlighted, when the match is in the page text.
  • Provider chip, the platform the app runs on.
  • Status badge, the HTTP status the app last answered with. Green is 2xx, blue 3xx, orange 4xx, red 5xx.
  • First seen, how long ago Periphery first got an answer from the app.
  • Emails, how many addresses were found on the page.
  • Key pills, one per detector that found a verified credential, when any did.
3

Narrow down

Clicking a provider chip or a status badge adds the matching filter to your query. Clicking a favicon adds a faviconHash: filter for apps with the same favicon. Or type filters directly: acme.com provider:vercel status:200. The full list is in the filter reference.
4

Open an app

Click a hostname to see the full record: the screenshot, every email address, the credential findings, and the extracted text.
5

Triage before you act

Check why the app matched and how fresh the evidence is. A domain mention, an email address, or a shared favicon is a search signal, not proof of ownership or impersonation. Attribution is performed by Periphery through its managed service. See Understanding results.
Periphery indexes hostnames under the supported provider suffixes. An app served only on its own custom domain is outside that scope. No results means Periphery has no current indexed match; it does not prove that no external app or exposure exists.

Filters

The buttons under the search box (Provider, Status code, First seen, Email, Favicon hash, Exposed keys) build filters for you. Clicking an option in a button’s list adds it to the query or removes it; a typed value is added with Apply or Enter. Click outside the list to close it. Each filter then shows as a chip in the search bar; remove a chip to drop that filter. Nothing is searched until you press Search or Enter, so setting several filters costs one search; until then, the results of your last search stay on screen. See the filter reference. Results are listed newest first, by when Periphery first saw each app; a query with words in it is ordered by relevance instead.

Views and pages

The list and grid toggle switches between rows with a thumbnail and cards with a large screenshot. Export is not available yet: clicking it asks whether you would use it. Clicking a result opens its app page, whose Back to results link returns to this search. On Plus, results come 50 per page, with numbered pages and Previous and Next to move between them; the count line says which results you are looking at. On Free, each search shows its first 10 results and the total number of matches, with an upgrade to see the rest. The moon button in the top bar switches the console to dark mode, and the sun button back. Until you choose, the console follows your system setting; your choice is remembered in this browser.

When nothing matches

A domain search with no results offers the domain’s name as a keyword search instead: acme.com becomes acme, which matches titles and page text that mention it. Any other empty result suggests trying a domain or a filter combination. Treat an empty result as “no indexed match”, not as a clean bill of health.
Free includes 100 searches a month and Plus 3,000; every page of results counts as one. Changing filters or removing chips does not count; running the search does. The console also allows one search per second, so a rapid series of searches or page changes may ask you to slow down. See Plans and limits.