FREE · 10-MINUTE TURNAROUND

Find out what attackers see when they look at your site.

Run a free non-intrusive security scan against your public-facing infrastructure. We aggregate the same open-source tools the security community trusts, then send a clean, prioritised report to your inbox - usually within 10 minutes.

Avg. report time~7 min Checks per scan40+ CostR0 / Free
Powered by
httpx nmap OWASP ZAP nuclei subfinder

Start your free scan

We will email the full report to you within 10 minutes.

Scan started

https://example.com

Hold tight — we are spinning up the toolchain and probing your target now.

Resolving DNS & reachability
Enumerating open ports
Fingerprinting web stack
Running active checks
Compiling report
Your full report will arrive at your inbox in the next ~10 minutes.
Why it matters

You cannot defend what you cannot see.

The vast majority of breaches start with something boring - a missing security header, a forgotten open port, an outdated plugin. Regular scanning is the cheapest, fastest way to catch those things before someone else does.

REASON 01

Attackers automate. So should you.

Bots probe the public internet 24/7 looking for known weaknesses. A scheduled scan finds those same weaknesses on your side first - while you still have time to fix them quietly.

REASON 02

Your stack changes every week.

A new plugin, a new subdomain, a config tweak - every change is a chance to introduce a vulnerability. Scanning is how you catch the regression before it becomes an incident.

REASON 03

Compliance & trust.

POPIA, ISO 27001, SOC 2 and most enterprise procurement processes expect documented vulnerability management. A clean report is the artefact that proves it.

How it works

Three steps. No agent. No installation.

Everything runs from our infrastructure against your public surface, exactly as an outside attacker would see it. There is nothing to install and we do not need credentials or VPN access.

01 / SUBMIT

Tell us where to look

Drop in a URL or domain. We confirm reachability and map your public attack surface in seconds.

02 / SCAN

We probe, you breathe

A pipeline of trusted open-source scanners runs passive and low-impact active checks against the target.

03 / RECEIVE

A clean, prioritised report

Findings ranked by severity with evidence, CVE references, and remediation guidance - in your inbox.

The toolchain

Battle-tested, open-source, transparent.

We do not build mystery scanners. Every check we run uses tools the security community has audited and maintained for years. You can verify everything we do.

httpx
PROBING · PROJECTDISCOVERY
Fast HTTP toolkit for fingerprinting servers, status, redirects, and tech stack.
nmap
PORTS · NETWORK
The de-facto network scanner. Identifies open services without fingerprint-busting probes.
OWASP ZAP
WEB · DAST
Industry-standard dynamic application scanner; surfaces missing headers, XSS sinks, CSRF risks.
nuclei
TEMPLATES · CVE
Template-driven CVE matching against known issues in WordPress, plugins, and stacks.
subfinder
RECON · DNS
Passive subdomain enumeration to map the broader attack surface around the primary host.

Want to talk about what you find?

If your scan turns up things you would like a hand on, book a 30-minute call with our security team. We also offer a 2-day rapid remediation engagement to close out vulnerabilities fast.

Let us talk security

Pick the channel that works best — we will get back to you within one working day.

📅   Book a meeting · Outlook ✉   security@overdrive.co.za