Find every site you publish, including the ones you forgot.
Old campaign microsites, staging subdomains, vendor-hosted forms, and PDF libraries keep serving pages long after anyone remembers them. We find them, name an owner for each, and help you decide what stays.
You can't fix what you don't know you publish
Accessibility audits, privacy reviews, and security scans all start from a list of sites. The list is usually incomplete. It has the main website and a few apps, and it misses the microsite from a product launch, the event registration site a vendor hosts, the staging server someone left public, and the document library on a CMS that was replaced years ago.
Those forgotten assets still carry your name. Search engines index them, old emails and printed materials link to them, and people still land on them. They're also where barriers, outdated information, and security problems sit longest, because nobody is looking.
A digital estate audit builds the real list, then decides what to do with every item on it.
How we build the inventory
We combine public sources with your own records. Each source finds assets the others miss.
| Source | What it reveals |
|---|---|
| DNS records and zone exports | Every hostname you've pointed somewhere, including those aimed at services you no longer use |
| Certificate transparency logs | Hostnames that have been issued TLS certificates, often including staging and internal names |
| Sitemaps and robots.txt | What each site says it contains, and what it asks crawlers to skip |
| Search engine indexes | Pages and documents the public can still find, even when nothing links to them |
| Analytics hostnames and referrers | Domains that still receive traffic or send it to you |
| Old campaign links | Destinations in email archives, QR codes, social posts, and print materials that people may still follow |
| Registrar and hosting accounts | Domains you pay for, when they renew, and who controls each account |
One decision for every asset
Every item in the inventory gets an owner and one of five decisions, recorded in a register you keep.
Keep
The asset is current, used, and owned. It joins your regular audit and monitoring scope.
Fix
People need it, but it has accessibility, performance, or security problems. It goes into the remediation plan with a priority.
Merge
Its content belongs on your main site. We map each page to a new home so nothing useful is lost.
Redirect
The asset is retired, but people still arrive from old links. Permanent redirects send them somewhere useful.
Retire
Nobody needs it. We take it down, clean up its DNS, and ask search engines to drop it.
Dangling DNS and expired certificates are more than housekeeping
Two kinds of finding deserve attention before anything else.
Dangling DNS. A subdomain still points at a cloud service, storage bucket, or hosted platform you've since shut down. If someone else can claim that resource, they can serve their own content on your subdomain, under your name. Once you know about it, the fix takes minutes: remove or repoint the record.
Expiring certificates and domains. An expired TLS certificate puts a full-page browser warning in front of anyone who follows an old link, and a lapsed domain registration can be bought by anyone. We list every certificate and registration with its expiry date and owner, so renewals stop depending on one person's inbox.
For public entities, Title II reaches more than the main website
The Justice Department's Title II rule applies WCAG 2.1 Level AA to the web content and mobile apps that state and local governments provide or make available, including through contractors and vendors. The compliance date is April 26, 2027 for larger governments, and April 26, 2028 for smaller ones and special district governments. An estate audit shows how much content that really is. See all compliance deadlines.
What the audit leaves you with
- An estate register of every domain, subdomain, microsite, and document library, with an owner for each
- A keep, fix, merge, redirect, or retire decision for every asset, with the reasoning
- A redirect map for retired and merged sites
- A DNS cleanup list, with dangling records flagged first
- A renewal calendar for certificates and domain registrations
- A light accessibility and performance check of every live site, so you know where full audits are needed
Where the audit starts
Digital Estate Audit
Starting at
$3,600
Discovery of your domains, subdomains, microsites, documents, and certificates, with an owner and a decision for each.
Request a quoteLarge estates, such as a university or a county government with many departments, are scoped after a short discovery call.
Questions before an estate audit
How do you find sites we don't know about?
Mostly from public sources: certificate transparency logs, DNS, search indexes, and archived links. Read access to your DNS, registrar, and analytics makes the inventory faster and more complete, but we don't need it to start.
Do you run a full accessibility audit on every site you find?
No. Every live asset gets a light automated and manual check so you can compare them. Full WCAG audits go to the sites you keep or fix and that people actually use.
Can you carry out the redirects and retirements?
Yes, or we can hand a precise plan to your IT team or agency. Either way, we verify afterward that redirects resolve, DNS is clean, and retired pages drop out of search results.
How do we keep the inventory current?
Baclion Watch checks your certificates, domains, and DNS records daily for upcoming expiry and dangling entries. Repeating the discovery step once a year catches the sites added since, so the register doesn't go stale.
Keep reading
Tell us what your website needs to do.
Send a link and a sentence about your deadline. You will hear back from a person within one business day, usually with a short list of questions and a proposed scope.