What types of exposed infrastructure does falc0n find?

falc0n discovers open API specifications, exposed GraphQL services with unauthenticated introspection, self-hosted AI infrastructure like Ollama and Jupyter notebooks, source maps, and cloud exposure across India and APAC.

proxy2model is an open-source tool that reads Burp exports, HAR files, or recorded browser sessions and builds an evidence-backed model of web applications, mapping endpoints, parameters, and operations while masking sensitive values.

What topics does falc0n publish research on?

falc0n publishes research briefs on country-scale studies of exposed infrastructure, field logs about specific findings and engineering details, open-source tools, and a CVE assessment series called cvecheck.

Fact sheet · Cybersecurity

falc0n

Independent security researcher mapping India and APAC's exposed attack surface at internet scale

0 votes. Log in to vote for falc0n in the file community vote²Follow the file. Log in to follow falc0n's file Not yet verified by the maker

Security research identifying exposed APIs, cloud infrastructure, and model servers across India and APAC, with tools built from findings.

Overview

Screenshot of the falc0n homepage — What falc0n.tech looks like

falc0n is an independent security researcher focused on India and APAC's digital surface, conducting internet-scale sweeps for publicly exposed infrastructure that should be private. The work encompasses finding open API specifications, exposed model servers, forgotten cloud surface, and self-hosted AI services, then publishing verified findings with remediation guidance.

Every discovery is manually re-checked before publication to ensure accuracy. Research findings are mapped to compliance frameworks like DPDP Act and ISO 27001. The researcher builds open-source tools from patterns discovered during sweeps, including proxy2model for mapping web applications from traffic and cvecheck for assessing vulnerabilities.

Feature facts

Internet-scale sweeps of India and APAC address space for exposed infrastructure
Manual verification of all findings before publication
Mapping of findings to DPDP Act and ISO 27001 compliance frameworks
Detection of exposed Swagger and OpenAPI specifications with 38% of specs exposing unauthenticated routes
GraphQL introspection scanning finding 2,159 services exposing full schema without authentication
proxy2model tool to map web applications from captured traffic
cvecheck series assessing CVEs with affected scope and exploitation evidence

Follow the file. Log in to follow falc0n's file

Follow falc0n: their milestones, new launches and awards come to you by email, once a day by default.

falc0n specifications

Specifications of falc0n
Section	Cybersecurity
Origin	India
Website	falc0n.tech
Votes²	0

falc0n metrics

Fact file for falc0n.tech: Ahrefs Domain Rating and Majestic link facts, each with the change since the last fact check.
Metric	Value
Domain Rating	0 no change since last check
Trust Flow	0 no change since last check
Citation Flow	0 no change since last check
Referring domains	0 no change since last check
External backlinks	0 no change since last check

Fact: Ahrefs Domain Rating checked 12 Nov 2026, fact changed 5 Nov 2026. Fact: Majestic checked 5 Nov 2026, fact changed 5 Nov 2026. Link facts from Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.

falc0n domain fact sheet

Open the fact sheet

Read from the public RDAP record on 12 Nov 2026, 05:34 UTC.
Domain age	4 months
Registered	24 Jun 2026
Expires	24 Jun 2027
Registrar	HOSTINGER operations, UAB
DNSSEC	Not signed

Every domain fact for falc0n.tech

falc0n launch receipt sheet

What we have measured for falc0n since it went live on SaaS Directory Info on 5 November 2026.

0 Domain Rating (Ahrefs) no change since launch
at launch: 0 (5 Nov 2026); latest: 12 Nov 2026
0 Trust Flow (Majestic)
first measured 5 Nov 2026
0 Referring domains (Majestic)
first measured 5 Nov 2026

Day 6 since launch. Next receipt: day 30, 5 Dec 2026. The figures report a change; they do not say what caused it, and many things can. No figure here is a guess.

Biggest gains on SaaS Directory Info

Got a launch coming up?

Step-by-step tips for before, during and after your launch, free to read on SaaS Directory Info.

Prepare
Launch day
Launch week
Next steps

Read the launch playbook

Compare and explore

Frequently looked up

Q1What types of exposed infrastructure does falc0n find?: falc0n discovers open API specifications, exposed GraphQL services with unauthenticated introspection, self-hosted AI infrastructure like Ollama and Jupyter notebooks, source maps, and cloud exposure across India and APAC.
Q2What is proxy2model?: proxy2model is an open-source tool that reads Burp exports, HAR files, or recorded browser sessions and builds an evidence-backed model of web applications, mapping endpoints, parameters, and operations while masking sensitive values.
Q3What topics does falc0n publish research on?: falc0n publishes research briefs on country-scale studies of exposed infrastructure, field logs about specific findings and engineering details, open-source tools, and a CVE assessment series called cvecheck.

Leave a review for falc0n

Review count for falc0n: none yet. Add the first.

Fact: reviews are free and cannot be bought. All reviews, in brief

Reviews and facts · Fact updates · Share these facts · Your SaaS? Claim this fact file · Report a wrong fact

Product	Origin	DR¹	Votes²
T4X ProtectionDefense at the Atom	Bangladesh	0	0 votes. Log in to vote for T4X Protection in the file
VeilleStop bots and account abuse in minutes	France	22	0 votes. Log in to vote for Veille in the file
KairalBot protection and fraud prevention for e-commerce sites and marketplaces	Italy	6	0 votes. Log in to vote for Kairal in the file
PeekrayFree Chrome extension that checks if a link is safe before you click it	United Kingdom	0	0 votes. Log in to vote for Peekray in the file