Discovery

Cloud Storage Discovery (S3 · GCS)

One of the quietest causes of a data leak is a cloud bucket opened once and never closed. A bucket named `company-backup` or `company-prod` left public can end up indexed by search engines, contents and all. Specula probes names derived from your brand and flags the ones exposed to the world.

• Probing by derived names

  It builds candidate names from your brand with common suffixes like `-backup`, `-prod`, and `-assets`, then checks whether those buckets are reachable from outside.

• It never reads the contents

  Specula does not download, list, or store what is inside a bucket. It measures one thing: whether access is open.

• Findings are candidates

  A similarly named bucket may belong to someone else, so the finding is presented as a candidate. You mark whether it is yours.