$ breachhunter scan --target your-site.com --modules all
[RECON] dns mapped · 14 subdomains · tech fingerprinted ✓
[PORTS] 23 ports probed · banners grabbed ✓
[TLS] cert chain valid · hsts present ✓
[WEB] 2 headers missing · /.env exposed ⚠
[DIR] 60 paths crawled · 3 respond ✓
SCORE 87/100 · GRADE B · 9 findings ranked CRITICAL → LOW
Website Vulnerability Scanner: find the holes before the attackers do.
BreachHunter is your website's security scanner that finds what attackers would — then tells you how to fix it, in plain language.
- See every exposure in one minute. Exposed files, open ports, broken TLS, missing headers — ranked CRITICAL → LOW with a 0–100 score.
- Prove each fix worked. One-click re-check stamps any finding VERIFIED FIXED — proof for you, your client, or your boss.
- Read the attack like a story. Your findings chained into a plain-language break-in narrative, in the exact order to fix them.
no credit card · live demo below, free signup + email verification · Pro $49 one-time: all five scan modules, drift tracking
BreachHunter is a website vulnerability scanner and penetration-testing assessment tool. It runs recon, port scanning, TLS analysis, a full website security audit and directory discovery against targets you own or are authorized to test, then scores 0–100 with fix guidance for every finding. Free plan available; Pro $49 one-time; Team $149 one-time.
Five scan modules
Recon
DNS A/AAAA/MX/TXT records, reverse DNS, subdomain enumeration via certificate-transparency logs, and technology fingerprinting from response headers.
Ports
Threaded TCP connect scan on 23 common ports with banner grabbing — flags exposed Telnet, RDP, Redis, MongoDB and databases.
TLS
Certificate subject, issuer and expiry analysis: expired, expiring soon, self-signed and hostname-mismatch detection, plus HSTS verification.
Web audit
Security-header checks (CSP, HSTS, X-Frame-Options and more) plus probes for exposed .env, .git, phpinfo and admin panels — and unprotected AI image-generation endpoints (auth, rate-limit and safety-control observation).
Dir brute
Threaded crawl of 60 common paths — admin, login, backups, config, actuator — recording which ones actually respond.
Scoring
Every scan rolls up to a 0–100 score and a grade, CRITICAL → LOW severities, each with plain-language explanation and fix guidance.
What no other scanner does
👻 Ghost Files
We check the Wayback Machine for archived copies of your most dangerous files (/.env, /.git/HEAD, backups…). Deleted from your server doesn't mean deleted from the internet.
all plans — ships on Free too, so every scan can catch it.
✅ Prove-It-Fixed
Fixed something? One click re-checks just that issue and stamps it VERIFIED FIXED — proof your fix worked, without waiting for a full rescan.
pro / team — one-click verification is a Pro-exclusive.
🗺️ Break-In Blueprint
Your findings chained into a plain-language burglary story: exactly how a hacker would combine them to rob you — and the order to fix them in.
all plans — the hook — every report gets the story; Pro adds proof the fixes worked.
🎨 AI Media-Generation Surface check
We probe your site for exposed AI image-generation endpoints with no authentication, no rate limits and no safety controls — the classic abuse vector for mass-producing non-consensual imagery (EU AI Act Art. 5, in force Dec 2, 2026).
all plans — ships on Free too, so every scan can catch it.
How it works
🔴 Live demo — recon + web audit
Free account with a verified email required — this keeps the scanner in the hands of legitimate owners, not drive-by attackers. Try it on scanme.nmap.org — a public target whose owner explicitly allows security scanning. The demo runs recon and web-audit modules only (3 scans/minute).
The demo runs recon + web-audit only. Get Pro — $49 for all five modules + drift tracking.
Pay once. Own the deep scan.
Start free. Pro pays for itself the first time a takeover or TLS hole shows up that the free scan can't reach.
Level 01
Free
$0 forever
- Basic recon: subdomains + tech fingerprint
- Basic web audit: headers + 18 sensitive paths
- Ghost Files archive check · Break-In Blueprint
Level 02 · most deployed
Pro
$49 one-time
- Everything in Free, plus:
- All five scan modules — recon, ports, TLS, web audit, dir brute
- Evidence capture + drift detection
- Prove-It-Fixed fix verification
Level 03
Team
$149 one-time
- Everything in Pro, plus:
- 5 seats + shared workspaces
- Scheduled weekly re-scans of your scope
Frequently asked questions
What does a website vulnerability scanner check?
BreachHunter runs DNS recon, port scanning (23 ports), TLS/SSL analysis, a web security audit (headers, misconfigurations, sensitive paths) and threaded directory discovery — then scores your site 0–100 with severity-ranked fix guidance for every finding. Only scan targets you own.
What does a BreachHunter scan include?
Five modules: recon (DNS records, subdomains via certificate-transparency logs, technology fingerprinting), port scanning (threaded TCP on 23 common ports with banner grabbing), TLS analysis (certificate expiry, self-signed, hostname mismatch, HSTS), web audit (security headers plus probes for exposed .env, .git, phpinfo and admin paths, and unprotected AI image-generation endpoints) and directory discovery (60 common paths).
Can I scan any website?
No. You must own the target or have written permission — every scan requires an authorization checkbox, and the live demo runs only against a public target whose owner explicitly allows scanning.
Does it exploit vulnerabilities?
No. BreachHunter is assessment-only: it finds and documents issues with evidence excerpts and fix guidance. It does not exploit, brute-force credentials, fuzz or run denial-of-service tests.
How long does a scan take?
About a minute for all five modules.
Can I track changes over time?
Yes — re-scans compare against previous results and label findings NEW, FIXED or UNCHANGED.
How much does it cost?
The Free plan covers basic scans. Pro is $49 one-time and Team is $149 one-time, unlocked with a license key bought via WhatsApp or email.
Is BreachHunter an Intruder alternative?
For website owners who want a thorough on-demand scan without a subscription: see our BreachHunter vs Intruder comparison — a $49 one-time scan vs ~$119–149/month per-target subscriptions, with honest TCO math.
BreachHunter Pro — $49 one-time: all five scan modules, drift tracking, Prove-It-Fixed.