Features

Users can choose between three scan types, "full", "default" or "lite" scans. Lite and default scans have fewer features but finish much faster than "full" scans.

Assessment Area	Lite Scan	Default scan	Full Scan	Description
Headers Misconfiguration Issues				Examines header components to find misconfigurations, and authentication issues in your application.
Email Spoofing (SMTP)				Examines the Simple Mail Transfer Protocol (SMTP) of the host for email falsification vulnerabilities
Web Application Firewall Issues (WAF)				Feature designed to detect the presence of a Web Application Firewall (WAF) on the target website. Identifying a WAF is essential to understanding the security posture of the website and the measures taken to protect it against potential threats.
Version-based Software Issues				Search for used technologies, services, certificates and version-based reports
Common Vulnerabilities and Exposures (CVEs)				Checks for all CVE Entries and lists CVE References for the found vulnerabilities.
Leaked Credentials				By accessing various leaked credentials databases (internal and external), this task aims to identify any instances where the target domain's credentials have been exposed
SQL Injection				By performing an iterative loop through all found URLs, this task identifies and tests for potential SQL injection points.
Subdomain Takeover				Detects vulnerable subdomains that could to be claimed by an unauthorized individual or attacker
Cross-Site Scripting (XSS)				Thoroughly examines the URL and its parameters to detect any potential XSS threats that could compromise the security of the web application.
Authentication Brute Force				Utilizes open and leaked information to understand the possibility of gaining unauthorized access to web applications through web form submissions
Open Redirect				Identifies open redirect vulnerabilities, which can potentially lead to security breaches and phishing attacks
Text4Shell				Identifies the presence of the Text4Shell vulnerability within the target domain or website, avoiding malicious actors that can potentially execute arbitrary commands on the target server
CMS Issues (WordPress, Drupal, etc.)				Seeks out used Content Management System (CMS) software and related framework details. It also reports vulnerabilities for exposed users.
Open Source Intelligence (OSINT)				Queries the Shodan database to identify exposed services, open ports, and other accessible information.
File and Directory Enumeration				Performs file and directory enumeration to identify files that should not exist or have improper read permissions
TLS Identification				Identification of TLS protocol support to identify vulnerabilities in cryptographic communication.
Check CSRF				Identifications of server forms/requests not protected against CSRF attacks

Note: API Scan is not covered in this table above.

Issue groups