Vulnerability scan
Paste a website or a public GitHub repository. You get a graded report with every issue ranked and the exact fix.
Your first scan each month is free with a free account. Websites: TLS, security headers, cookies, CORS, outdated JavaScript libraries with CVEs, email spoofing, exposed services. Repositories: vulnerable dependencies, leaked API keys and private keys, risky code and CI settings.
Scan only websites and code you own or are allowed to test. The standard website scan reads only what any visitor can see; deep checks need proof that you own the domain. Accessing or scanning systems without permission is an offence under PECA 2016. Test only what you own or have written permission to test. Automated scans don't replace a manual penetration test.