Continuous external monitoring

Stay ahead of domain abuse and public exposure changes.

Onlooker helps teams monitor domain, certificate, and internet-facing web exposure activity, detect suspicious lookalike registrations, and cut response time with high-signal intelligence.

Start with a 7-day free trial, then choose the monitoring plan that matches your domain estate.

What Onlooker delivers

Practical visibility without adding operational overhead.

Lookalike Domain Detection

Track newly registered domains that resemble your brands, products, or executive identities.

DNS Change Monitoring

See critical DNS updates and unexpected infrastructure changes as they appear.

Certificate Intelligence

Observe new certificate issuance and monitor expiry windows to reduce blind spots.

External Exposure Inventory

Inventory reachable HTTP and HTTPS endpoints, hosting metadata, redirects, response headers, and TLS posture.

Pricing

Simple monthly plans with a 7-day free trial.

Start monitoring one domain free for 7 days. Upgrade when you need to monitor more domains, keywords, or external exposure changes.

Starter

1 domain

£4.99/month

For monitoring a primary brand, campaign site, or critical domain.

Growth

5 domains

£19.99/month

For teams watching multiple brands, product lines, or customer-facing domains.

Scale

20 domains

£49.99/month

For broader external attack-surface and brand monitoring programmes.

All plans are billed monthly in GBP. The 7-day free trial is available for new accounts after domain ownership verification.

Onlooker Bot transparency

Clear identification for public web observations.

Onlooker Bot is the automated browser used by ONLabs Onlooker to capture public website state for customer-authorized monitoring, external exposure inventory, and exposure-change detection.

What exposure monitoring captures

Onlooker records endpoint reachability, HTTP status, redirect chains, response banner headers, hosting provider, ASN, country, and TLS posture for authorized domains.

When exposure changes are flagged

Snapshots are compared over time to highlight new public endpoints, service metadata changes, removed security headers, weakened TLS, hosting movement, or risky network providers.

User agent: on-labs-onlooker/1.0 (+https://on-labs.net/onlooker-bot)

Read the Onlooker Bot transparency page

Why teams choose Onlooker

Built for clear decisions, faster response, and better protection.

  • Earlier detection of suspicious activity before incidents escalate.
  • Faster triage through focused signals over noisy, generic alerts.
  • Higher confidence when assessing domain, brand, and public exposure risk.
  • Lower friction for security and brand teams working together.

“The hardest part of brand protection is not data scarcity — it is signal quality. Onlooker is designed to surface what matters most.”

ONLabs Security Research Team

ONLabs insights

Read the Onlooker Blog.

Research notes, product walkthroughs, and practical external-monitoring guidance from the ONLabs team.

Start monitoring

Begin with a 7-day free trial.

Add your first domain, verify ownership, and start building an external visibility baseline with Onlooker.