Question 1

What is SecurityScanner?

Accepted Answer

SecurityScanner is an AI-powered web security scanner that audits any public URL across 10 security modules aligned with OWASP Top 10 2025. It generates a 0–100 security score, identifies vulnerabilities with severity ratings, and provides stack-aware AI code fixes — all in about 60 seconds.

Question 2

What security modules does SecurityScanner check?

Accepted Answer

SecurityScanner checks 10 modules: Security Headers (CSP, HSTS), TLS/SSL Audit, XSS Detection, SQL Injection Testing, Secrets Detection, CORS Audit, Cookie Security, Sensitive Path Discovery, Port Scanning, and JavaScript CVE Scanning. Each module maps to specific OWASP Top 10 2025 categories.

Question 3

Is SecurityScanner free to use?

Accepted Answer

Yes, SecurityScanner offers a free tier with 1 scan per month. The Pro plan ($29/month) includes 4 scans/month, ai code fixes, compliance reports. The Business plan ($99/month) adds 30 scans/month, all compliance frameworks, api access. All paid plans include a 14-day free trial.

Question 4

Does SecurityScanner generate code fixes?

Accepted Answer

SecurityScanner focuses on accurate detection and stack-aware remediation guidance. On the Pro and Business plans, our MCP server exposes a `propose_fix` tool that returns structured remediation guidance per finding (header snippets, configuration changes, library upgrade commands). Each proposal includes the rationale and a verification step you can re-run with `apply_fix` to confirm the fix actually resolves the finding.

Question 5

What is the OWASP Top 10 2025 compliance report?

Accepted Answer

The compliance report maps each finding to the OWASP Top 10 2025 risk categories (A01 through A10), showing which risks your site is exposed to and how to remediate them. It also references NIST CSF 2.0, PCI DSS 4.0, and ISO 27001 controls where applicable.

Component	Status	Latency
FrontendNext.js app on Vercel	Checking…	—
WorkerScan worker on Fly.io	Checking…	—
SupabasePostgres database	Checking…	—

System status