About NullBlocks
We give security teams a continuous, honest picture of their public-facing attack surface — every subdomain, technology, and known vulnerability, mapped and monitored as it changes.
WHAT WE DO
Most organizations don't have a current inventory of what they expose to the internet. NullBlocks builds and maintains that inventory automatically: we enumerate every subdomain and live host, fingerprint the software and versions running on them, and match those versions against known CVEs — then keep watching, so you hear about changes instead of discovering them during an incident. Start with a free attack-surface report for any domain, or go deep with the Graph Explorer.
WHY IT MATTERS
Your attack surface changes every time a team spins up a subdomain, ships a new app, or an acquisition brings in unfamiliar infrastructure. Attackers enumerate this continuously; most defenders check it once a year. We close that gap with continuous, version-accurate visibility.
WHERE DOMRECON CAME FROM
NullBlocks' scanning engine didn't start as a company — it started in 2022 as a set of shell scripts Jerrod wrote for his own domain discovery and analysis work, released as open source under the MIT license. Years of iterating on that original tooling — what actually finds a dangling subdomain, what actually correlates to a real CVE, what's just noise — became the foundation for the production scanning engine NullBlocks runs today.
LEADERSHIP
Founder & CTO, NullBlocks Systems
20+ years as a technology executive leading enterprise engineering teams, with a background in large-scale digital transformation, cloud-native architecture, and AI/agentic systems strategy. Jerrod built the original DomRecon tooling himself, starting in 2022, as a set of shell scripts for domain discovery and analysis — the same project that NullBlocks' current scanning engine grew out of.
COMPANY
NullBlocks Systems, LLC
hello@nullblocks.com
· (913) 735-6474