Expanse became Cortex Xpanse. What if you just want the domain watch?

Expanse, the attack-surface company, was acquired by Palo Alto Networks and folded into Cortex Xpanse. The standalone Expanse brand is gone, and the product now lives inside a larger, enterprise-priced platform. (Source: Palo Alto Networks acquisition of Expanse, 2020.)

Two different jobs under one old name

Expanse mapped an organisation's whole internet-facing footprint, which is a large and genuinely hard problem, and Cortex Xpanse continues that work. But a lot of teams reached for it to answer a smaller, daily question: what changed on the domains we care about, and when. That smaller question does not need an enterprise platform.

The focused, signed answer

DomainDrift reads a domain's public surface and records every change to its DNS, certificates, mail and hosting. It is a watch and a dated record of that surface. Each reading is signed the moment it is taken and dated on a public chain, so the answer to "what did this domain run on the day it mattered" is a record you can show someone.

A signature proves who took a reading and that it has not changed; the chain anchor proves when it existed. Correctness stays a separate question you check yourself, against keys we publish. Signing is added trust. See how to verify.

For a portfolio owner, a consultancy watching client estates, or a security team keeping an eye on vendors, that focus is the point. You get the domain and DNS observation part, priced for the job, with a record that verifies in your own browser.

Type any company at domaindrift.io and watch its domain get read apart, signed and dated. Looking is free; keeping the record is an account.