Website Penetration Testing

A manual ethical-hacking assessment of your website. A real tester probes it the way an attacker would.

Report Bugs

CVSS scores missing from half the findings 281 views seen 3mo ago marcus.b 01 Jul 2026 New

WAF blocked the tester so the report is basically empty 639 views seen 4mo ago ritika_s 08 Jun 2026 New

CSRF finding on an endpoint that requires a bearer token 1,191 views seen 4mo ago dhleung 13 May 2026 In progress

Test hit the wrong subdomain 845 views seen 4mo ago mfletcher 27 Apr 2026 New

Reported XSS I can't reproduce 716 views seen 4mo ago kpatel88 17 Mar 2026 In progress

Remediation steps reference a framework I don't use 1,277 views seen 5mo ago benh 04 Mar 2026 Fixed

SSL/TLS section says cert expired - it renewed via Let's Encrypt mid-test 877 views seen 3mo ago TomW 26 Feb 2026 Fixed

Tester's requests took my staging site down 1,257 views seen 6mo ago greg_h 11 Feb 2026 Fixed

Executive summary contradicts the technical report 630 views seen 3mo ago claire.dn 20 Jan 2026 Fixed

Second report never arrived - only got the executive summary 1,399 views seen 6mo ago nadia.k 16 Jan 2026 Fixed

Info-disclosure finding is just my public API docs 1,507 views seen 3mo ago pjmorris 15 Dec 2025 Won't fix

Payloads left test rows all over my database 1,090 views seen 3mo ago a.novak 27 Nov 2025 Won't fix