How to Find All Subdomains of Any Website for Free in 2026

A security consultant I know was hired to do a surface-level assessment of a client's web presence before a more formal penetration test. The client gave him their main domain and said "we have the ma