ProbeHunt
Authorized security testing · for everyone

Find your weak spots before they do.

ProbeHunt scans the sites and apps you own, tells you in plain language what’s actually dangerous, and shows you exactly how to fix it. Powerful enough for pros, simple enough for everyone else.

No credit card · verify ownership · non-destructive by default

70
ProbeHunt Score · yoursite.com
3 things to fix first
Login allows unlimited attemptsCRITICAL
Software out of date (CVE)HIGH
Email can be spoofedHIGH
Built on open security standards
OWASP Top 10CVE / NVDEPSSCISA KEVMITRE ATT&CK

Secure in three steps

No security degree required. You can only test assets you prove you own.

1
Add & verify your asset

Prove you own a site with one DNS line, a file, or a meta tag. We never test what you can’t verify.

2
We scan — safely

Non-destructive checks for the OWASP Top 10, known CVEs, exposed assets, and email/TLS hygiene.

3
Fix what matters

A prioritized, plain-language fix-list with step-by-step remediation and ready-to-send tickets.

Everything, one pane of glass

Attack-surface discovery, scanning, continuous monitoring, and an AI copilot that translates and prioritizes.

Attack-surface discovery

Find exposed subdomains, services and forgotten assets before anyone else does.

Vulnerability scanning

Web, API, cloud and TLS checks mapped to real-world exploitability (EPSS/KEV).

Continuous monitoring

Scheduled re-scans and alerts when a new issue, asset or CVE affects you.

AI copilot

Translates findings, prioritizes by real risk, and drafts the fix.

Reports & compliance

White-label PDF + live link, mapped to OWASP ASVS, ISO 27001, PCI, SOC 2.

Built-in safety

Ownership-gated, rate-limited, fully audit-logged. Not an attack tool.

AI SECURITY COPILOT

Plain words for owners. Full depth for pros.

Every finding comes with “what it is, why it matters, how to fix it for your stack.” One click flips to the technical evidence, CVSS, and a drafted fix ticket.

Your login page accepts unlimited password attempts — add a lockout and 2FA. Want me to draft the fix ticket?
Draft ticketExplain more

Simple pricing

Start free. Prices are indicative while we’re in early access.

Free
$0
Rp0
Join waitlist
✓1 verified asset
✓Monthly scan
✓Score + top 3 fixes
MOST POPULAR
Pro
$99/mo
± Rp1.5jt/bln (indicative)
Join waitlist
✓Many assets
✓Continuous scans
✓API + integrations
✓White-label reports
Agency
Custom
Contact us
✓Multi-client console
✓White-label domain
✓Volume pricing
✓Priority support

Pay in USD or IDR · QRIS & Virtual Account via Pakasir · international cards at launch

Questions, answered

Can I scan any website?

No — only assets you prove you own or are explicitly authorized to test. It’s enforced before any scan runs.

Will scanning break my site?

Scans are non-destructive by default, rate-limited, and run within a verified scope. Aggressive options are opt-in and clearly flagged.

I’m not technical. Is this for me?

Yes. Simple mode gives a plain-language score and a short fix-list, and the AI copilot explains and drafts the fixes.

Do you support Indonesian payments?

Yes — QRIS and Virtual Account via Pakasir, plus international cards. Billing in IDR or USD.

Get early access.

Join the waitlist — we’ll invite you when ProbeHunt opens, starting with your own verified sites.