// AI vulnerability scanner
Passive Website Security Scanner & AI-Assisted Guidance
Review publicly observable security headers, TLS, cookies, email authentication records, server disclosure, and exposed-path configuration. Potential findings include practical remediation guidance for human review. Use this tool only on websites you own or are explicitly authorized to assess.
Need additional monthly scan capacity?
Free includes 1 scan/month with the score, severity breakdown, and one sample finding in full. Pro provides 100 scans/month with every finding unredacted, remediation steps, history, and exports.
Review Pro access →Frequently asked questions
What does the vulnerability scanner check?
It reviews publicly observable HTTP security headers, TLS and certificate posture, cookie flags, email authentication records that can be discovered without private selectors (SPF and DMARC), and common exposure signals, then prioritizes potential findings by risk.
Is the scan safe and passive?
The scanner is designed to read publicly available responses and configuration without intentionally exploiting or modifying the target. You must confirm that you own the site or are explicitly authorized to assess it.
How many free scans do I get?
One scan per month is free. The free report shows your score, grade, the full severity breakdown, every passed check, all low and informational findings, and one medium-severity finding in full. Medium, high, and critical findings are listed by severity and exposure category, but the specific defect and its remediation steps are reserved for paid plans. Pro raises the limit to 100 scans per month and unlocks every finding, remediation guidance, history, and exports.
Why are some findings hidden on the free plan?
The scan itself always runs in full and the complete result is stored against your account, so nothing is lost. Withholding the detail and remediation for higher-severity findings is what funds the service. Upgrading unlocks your existing reports retroactively — you do not need to rescan.
What are AI countermeasures?
For applicable findings, the scanner can provide prioritized, plain-language remediation guidance and configuration suggestions for your review. Validate every change in your environment before deployment.