Brume

What a report contains

• Summary

  What the domain runs on and who it depends on, stated first; then the five findings Brume is most certain of.

  ALL SECTIONS

• DNS & Email

  Nameservers, registrar, mail exchangers, and the SPF, DKIM and DMARC policies that decide who may send as the domain.

  NS MX TXT SPF DKIM DMARC

• Identity

  Single sign-on providers, federation endpoints and the path a user takes to sign in.

  SAML OIDC AUTODISCOVER

• Infrastructure

  CDN, hosting provider, WAF, certificate issuer and the technology stack behind the front door.

  HTTP TLS ASN HEADERS

• Supply chain

  Third-party vendors disclosed by verification records, scripts and mail routing, each with its risk note.

  TXT CNAME SCRIPTS

• Security

  Transport policy, security headers, CAA, DNSSEC and the disclosure program, if there is one.

  HSTS CSP CAA DNSSEC SECURITY.TXT

• Subdomains

  Every hostname disclosed in certificate transparency logs, sorted and counted.

  CT