Home
Security · SEO · AEO
Every check, one scanner.
41 scanners running 200+ individual checks — SQLi, XSS, exposed keys, BaaS misconfigs, SSL/TLS grading, plus SEO & AEO visibility, uptime, Core Web Vitals and accessibility. Every finding ships with an AI-ready fix prompt.
Vulnerability
SQL Injection Scanner
Detect SQL injection vulnerabilities in your web application before attackers exploit them.
OpenVulnerability
Cross-Site Scripting (XSS) Scanner
Find XSS vulnerabilities that could let attackers inject malicious scripts into your pages.
OpenConfiguration
Security Headers Scanner
Check if your site has the right HTTP security headers to prevent common attacks.
OpenVulnerability
API Key Exposure Scanner
Detect exposed API keys, tokens, and secrets in your frontend code and responses.
OpenConfiguration
SSL/TLS Security Scanner
Verify your SSL/TLS configuration, certificate validity, and encryption strength.
OpenVulnerability
CORS Misconfiguration Scanner
Detect dangerous CORS policies that could allow unauthorized cross-origin access.
OpenVulnerability
CSRF Protection Scanner
Check if your forms and API endpoints are protected against cross-site request forgery.
OpenConfiguration
Cookie & Session Security Scanner
Audit cookie flags, session management, and token security for your application.
OpenVulnerability
Authentication Flow Scanner
Test your login, signup, and password reset flows for common security weaknesses.
OpenInfrastructure
DNS & Email Security Scanner
Verify DNS configuration, SPF, DKIM, DMARC records, and domain security.
OpenVulnerability
Open Redirect Scanner
Find URL redirect vulnerabilities that attackers use for phishing campaigns.
OpenVulnerability
GraphQL Security Scanner
Audit your GraphQL API for introspection leaks, injection, and query complexity attacks.
OpenVulnerability
JWT Security Audit
Analyze JSON Web Tokens for weak algorithms, key exposure, and implementation flaws.
OpenVulnerability
Tech Stack & CVE Scanner
Identify your technology stack and check for known vulnerabilities (CVEs).
OpenMonitoring
Threat Intelligence Scanner
Check if your domain or IP appears on blocklists, malware databases, or threat feeds.
OpenCompliance
Legal Compliance Scanner
Check for privacy policy, cookie consent, terms of service, and GDPR compliance indicators.
OpenInfrastructure
DDoS Protection Scanner
Evaluate your site's resilience against distributed denial-of-service attacks.
OpenVulnerability
File Upload Security Scanner
Test file upload endpoints for unrestricted uploads and remote code execution risks.
OpenMonitoring
Audit Logging & Monitoring Scanner
Verify that security events are properly logged and monitored in your application.
OpenInfrastructure
Mobile API Rate Limiting Scanner
Check API endpoints for proper rate limiting and abuse prevention on mobile-facing APIs.
OpenInfrastructure
Domain Hijacking Detection
Detect subdomain takeover vulnerabilities and domain registration security issues.
OpenVulnerability
Debug Endpoints Scanner
Find exposed debug routes, admin panels, and development endpoints left in production.
OpenVulnerability
Input Validation Scanner
Test form fields and API inputs for proper validation and sanitization.
OpenInfrastructure
Vercel Hosting Security Scanner
Audit Vercel-specific security settings, headers, and deployment configuration.
OpenInfrastructure
Netlify Hosting Security Scanner
Check Netlify-specific security configuration, headers, and deployment settings.
OpenInfrastructure
Cloudflare Security Scanner
Audit Cloudflare configuration, WAF settings, and CDN security features.
OpenVulnerability
Dependency Vulnerability Scanner
Scan your project dependencies for known vulnerabilities and outdated packages.
OpenConfiguration
Supabase Security Scanner
Audit your Supabase project for RLS misconfigurations, exposed APIs, and insecure auth settings.
OpenConfiguration
Firebase Security Scanner
Check Firebase Security Rules, authentication settings, and Firestore/RTDB access controls.
OpenInfrastructure
GitHub Repository Security Scanner
Scan your GitHub repository for leaked secrets, misconfigured Actions, and supply chain risks.
OpenVulnerability
Browser Storage & Session Token Scanner
Detect JWTs, refresh tokens, and session identifiers stored in localStorage or sessionStorage.
OpenVulnerability
Source Code SAST Scanner
Scan connected GitHub repositories for high-risk auth, secret, CORS, SQL, SSRF, and cookie patterns.
OpenVulnerability
Webhook Signature Verification Scanner
Find webhook handlers that appear to trust provider events without verifying signatures.
OpenVulnerability
IDOR & Broken Access Control Scanner
Find exposed admin routes, unauthenticated APIs, sequential IDs, and mass data exposure.
OpenVulnerability
Tenant Isolation Scanner
Use two authenticated test actors to verify tenant-scoped resources cannot be read across accounts.
OpenSEO & AEO
SEO Scanner
Grade your search visibility with 68 checks — indexability, metadata, structured data, content, links, and Core Web Vitals.
OpenSEO & AEO
AEO Scanner (AI Visibility)
Check whether AI answer engines — ChatGPT, Claude, Perplexity, Google AI — can crawl, parse, and cite your site. 46 checks.
OpenMonitoring
Uptime Monitoring & Status Pages
External uptime checks every 60 seconds with incident tracking, down/recovery alerts, and a public status page.
OpenPerformance
Performance & Core Web Vitals Scanner
Lab diagnostics plus real-user Core Web Vitals from CrUX and RUM — with daily regression alerts before rankings drop.
OpenAccessibility
Accessibility Scanner (WCAG)
WCAG 2.x Level AA signals across structure, forms, navigation, and media — the EAA-relevant checks, automated.
OpenMonitoring
Domain Watchtower
Domain expiry, transfer locks, nameserver drift, DNSSEC, CAA, and certificate runway — watched daily, alerted on change.
OpenRun every check in 30 seconds
Paste your URL and get a complete report with an AI-ready fix prompt for every finding.
Scan your site free