Ask HN: Do you know any tool to scan the public attack area of a company?

I'd like to try to identify potential attack vectors of a network from the outside as a potential bad actor could try. It would be best if it accepted a domain name as the starting point of the scan.