Home M-SOC Shipcrawler Haris
Other Services Web Development Networking Mobile App Development
Contact Blog Free Fleet Scan
FREE 3-VESSEL EXPOSURE SCAN Passive OSINT · No Agent · 24h Report

See your fleet the way an attacker does.

Free exposure scan for three commercial vessels. We query public search indexes and satellite ASN ranges to surface what is exposed on your fleet: unauthenticated VSAT terminals, open Telnet ports, bridge camera feeds. 100% passive. No agent. No shipboard access.

FREE RECON SCAN REQUEST // 24H DELIVERABLE
PASSIVE SHODAN / CENSYS RECONNAISSANCE
ZERO-TOUCH
01 · How the scan works

From request to report in 24 hours.

Three vessels, one confidential report, zero commitment. The scan is fully passive and runs without touching the ship.

STAGE 01 REGISTRY SYNC

1. We identify

Your IMO numbers resolve to MMSI, flag state, AIS tracking history, and recent port calls from open global registries. The vessel we scan is verified.

Identity check · Open data
STAGE 02 PASSIVE RECON

2. We sweep

Passive queries across Shodan, Censys, and satellite ASN blocks (Inmarsat, Marlink, Speedcast). No active probing of your ship, no traffic, zero risk to voyage.

Shodan · Censys · ASN
STAGE 03 ACTION ORDER

3. You receive

One confidential PDF report per fleet: identity, exposure perimeter map, open doors, and a plain-language fix order. In your inbox within 24 hours.

Confidential · 24h
02 · What the scan checks

Four layers. Four places the internet can reach.

Every commercial vessel carries four distinct network layers. The scan checks all four, from the mast to the engine room.

Layer 01 · Mast

Satellite uplink

Inmarsat and VSAT terminals answering on public satellite IP ranges, often with default factory credentials.

Inmarsat · VSAT · ASN
Layer 02 · Bridge

VSAT web consoles

Terminal management panels left open on public IPs, giving remote access to reboot, detune or reconfigure the link.

Web GUI · Default creds
Layer 03 · Navigation

Bridge OT

ECDIS, AIS and CCTV on flat unsegmented networks, with camera feeds and console streams reachable from outside.

ECDIS · AIS · RTSP
Layer 04 · Engine

Engine SCADA

Propulsion and ballast PLCs reachable over legacy industrial protocols such as Telnet, Modbus and unencrypted serial.

PLC · Modbus · Telnet
03 · The deliverable

What the report carries, page by page.

No data dump. Every finding is prioritized and explained in plain language, with the fix order marked.

Identity & movement
IMO
MMSI · AIS · Port calls
The vessel we scanned is the vessel you own, verified against open registries.
Exposure map
ASN
Terminal · IP · Indexed
Which open databases index your vessel, and what they show an attacker.
Open doors
Ports
Protocols · Severity
Ports and protocols found open across the four layers, graded by reachability.
Fix order
Fix
Plain-language steps
What to close, what to segment, and what to do before the next port call.

Free scan. Real findings. No obligation.

Three vessels, one confidential report, zero commitment. It is also the honest way to evaluate whether we are the right team for your fleet.

Start the Scan →