Digital Asset Register & Ownership Check – Who Owns Your Domains, and What Transfers If You Sell
By purchasing you agree to our Terms of Service, including your responsibility to run scans only against systems you own or are authorised in writing to test.
If the person who registered your domain left the company, do you still own it?
The Digital Asset Register & Ownership Check builds the document most small businesses do not have: what the business owns online, who the public record says controls it, when it expires, and which suppliers everything depends on. It reads the registration records for up to three domains, every certificate issued for your names in the public transparency logs, the subdomains and the services behind them, whether your business controls its own social handles and app-store listings, and who runs your DNS, email, website and certificates. Then it asks eight questions about who holds the logins.
What it checks
- Domain expiry and transfer lock, and who the registration record says owns each domain
- Every certificate issued for your names in the public logs, and which are expiring
- The supplier dependency map: who runs your DNS, email, website and certificates
- Retired and dangling names, handle ownership across platforms, and Apple App Store presence
- Eight questions about who holds the registrar login, and who owns your code and cloud accounts
- Public records only: one ordinary visit to your own homepage, and nothing else touches your systems
What you get
- A written PDF report emailed back to you, typically within one business day.
- Every finding rated Critical / High / Medium / Low, with measured results and your own answers kept separate.
- A digital asset register you keep: domains, certificates, subdomains, handles and suppliers in one table.
- Remediation ordered by what would hurt most: the domain that expires next, the login one person holds.
- A "what was checked" appendix that states the limits of the scan honestly.
- Reporting built to CompTIA Security+ and PenTest+ practice standards.
Who it's for
Owners preparing to sell, buy or insure a business, anyone whose domain was set up by a developer or an ex-employee, and every business that has never written down what it owns online. A vulnerability report is stale in a month; this is the document you keep.
Requirements
- Windows 10 or Windows 11
- No administrator rights needed
- An internet connection
- Up to three domain names, your business name, and optionally a handle and website address
- About 4 minutes for one domain, up to 7 for three
- You must own or be authorised to check the domains you enter
What this is not
QuickScan is detection and advisory only. It reads public registration, DNS and certificate records; it never logs in to a registrar, never changes a record, and never tests whether a dangling name can be taken over. It is not a legal opinion on ownership, a certification, an audit or an attestation.
One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.
TommyGun is developed by ThreatVector LLC. Reporting mechanisms and cybersecurity customer service are powered by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.