// AI vulnerability scanner
Passive Website Security Scanner & AI-Assisted Guidance
Review publicly observable security headers, TLS, cookies, email authentication records, server disclosure, and exposed-path configuration. Potential findings include practical remediation guidance for human review. Use this tool only on websites you own or are explicitly authorized to assess.
Need additional monthly scan capacity?
Free includes 1 scan/month with the score, severity breakdown, and one sample finding in full. Pro provides 100 scans/month with every finding unredacted, remediation steps, history, and exports.
Review Pro access →// バックグラウンドスキャン
ジョブキューとスケジュール実行
Webリクエストの外でパッシブ診断を実行できます。許可された対象をバックグラウンド処理としてキューに登録し、定期的なスキャンをスケジュールして、各ジョブを保存済みレポートまで追跡できます。
- 単発のスキャンをキューに登録し、あとからレポートを受け取る
- 毎時・毎日・毎週・毎月の再診断をスケジュールする
- 自動リトライ、キャンセル、ジョブ履歴の確認
スキャン機能自体は無料プランでもご利用いただけます。このセクションは、バックグラウンド実行とスケジュール機能を追加するものです。
Frequently asked questions
What does the vulnerability scanner check?
It reviews publicly observable HTTP security headers, TLS and certificate posture, cookie flags, email authentication records that can be discovered without private selectors (SPF and DMARC), and common exposure signals, then prioritizes potential findings by risk.
Is the scan safe and passive?
The scanner is designed to read publicly available responses and configuration without intentionally exploiting or modifying the target. You must confirm that you own the site or are explicitly authorized to assess it.
How many free scans do I get?
One scan per month is free. The free report shows your score, grade, the full severity breakdown, every passed check, all low and informational findings, and one medium-severity finding in full. Medium, high, and critical findings are listed by severity and exposure category, but the specific defect and its remediation steps are reserved for paid plans. Pro raises the limit to 100 scans per month and unlocks every finding, remediation guidance, history, and exports.
Why are some findings hidden on the free plan?
The scan itself always runs in full and the complete result is stored against your account, so nothing is lost. Withholding the detail and remediation for higher-severity findings is what funds the service. Upgrading unlocks your existing reports retroactively — you do not need to rescan.
What are AI countermeasures?
For applicable findings, the scanner can provide prioritized, plain-language remediation guidance and configuration suggestions for your review. Validate every change in your environment before deployment.