How long does a vulnerability scan take?

It depends on the depth. The fast web recon finds subdomains and web services in minutes. Normal and deep scans take longer because they check more. An email tells you when your report is ready.

Does the vulnerability scanner attack my website?

The passive scan and the vulnerability scan do not attack actively. Only the deep level runs active tests. Tests with a login only run inside an engagement you set up first.

What is in the report?

You get a white-label HTML report. It has a summary for management, an overall risk rating, CVE and CWE references and remediation advice. There is also a Markdown report in which secrets such as passwords are redacted.

Who can start a website security check?

Only someone authorized for the domain. If your email domain matches the target domain, the scan starts right away. Freemail addresses do not count. Otherwise you prove ownership with a DNS TXT record.

Back to SnapScan

SnapScan · Vulnerability scanning

A vulnerability scanner for websites, APIs and cloud

One flaw in your website is often all an attacker needs. SnapScan finds these flaws before others do. You get clear findings with proof and a plan to fix them. After the fix, you retest with one click.

Request a demo

The website security check

Getting started is easy. You enter your name, email and domain. SnapScan checks that you are authorized for the domain. Then the scan runs on its own.

The vulnerability scan checks your systems for known flaws of every severity. It does not attack actively. For more depth, web recon comes in three levels:

Fast: find subdomains and web services in a few minutes.
Normal: a more thorough pass over your web presence.
Deep: adds active tests for vulnerabilities.

Test APIs, cloud and Kubernetes

API tests and DAST with login

An API is the interface programs use to exchange data. SnapScan checks headers, CORS and cookie settings there. It also flags API descriptions that anyone can read. With a login, DAST goes further. DAST means testing the running app from the outside. It shows whether one user can see another user's data. These tests only run inside an engagement.

Cloud accounts and Kubernetes

From the outside, SnapScan finds open cloud storage and dangling DNS records. From the inside, it reads the settings of your AWS, Azure and GCP accounts. That covers access rights, firewall rules, encryption and logging. SnapScan also checks Kubernetes clusters. Both run read-only, against CIS benchmarks. Your credentials are stored encrypted (AES-256-GCM).

Findings your team can work with

A long list helps nobody. In SnapScan, each finding is its own record. It has a severity, CVE and CVSS, a host and a status.

Clear status: open, verified, fixed, accepted or false positive.
No duplicates: repeat scans do not create new entries. SnapScan tracks when a finding was first and last seen.
Evidence: each proof is stored as a hashed artifact, such as a screenshot. So you can later check that it was not changed.
Retest: one click checks a single finding again. The result: still present, no longer seen or unclear.

Each finding comes with remediation advice. Data from CISA KEV and EPSS shows which flaws attackers already use.

Reports for tech teams and management

The white-label report carries your branding. It opens with a short summary and an overall rating. The details follow, with CVE and CWE references. A Markdown report redacts secrets such as passwords. For developers, there is an export in SARIF format.

A scan does not replace a manual test. Business logic and chained attacks need people. That is what ourpenetration testsare for.

Legal notice: Scans only take place with the permission of the owner of the systems tested. Scanning other people's systems without permission may be a criminal offense.

FAQ on vulnerability scanning

How long does a vulnerability scan take?: It depends on the depth. The fast web recon finds subdomains and web services in minutes. Normal and deep scans take longer because they check more. An email tells you when your report is ready.
Does the vulnerability scanner attack my website?: The passive scan and the vulnerability scan do not attack actively. Only the deep level runs active tests. Tests with a login only run inside an engagement you set up first.
What is in the report?: You get a white-label HTML report. It has a summary for management, an overall risk rating, CVE and CWE references and remediation advice. There is also a Markdown report in which secrets such as passwords are redacted.
Who can start a website security check?: Only someone authorized for the domain. If your email domain matches the target domain, the scan starts right away. Freemail addresses do not count. Otherwise you prove ownership with a DNS TXT record.

Try the vulnerability scanner

We will show you a scan on a sample target. Together we will find the right way to start.

Request a demo

How we work with you

We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.

1. Free initial conversation

We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.

2. Current state review

We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.

3. Delivery with a dedicated lead

An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.

4. Running and reviewing

After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.