Preview deployment — the prices shown are placeholders; Stripe is in test mode, so no card is ever charged.
ScanMe
Vulnerability scanning as a service

Find what's exposed
before someone else does.

Point us at your infrastructure. We run a full scanner suite against it, an analyst reviews every finding, and you get a written report — not a CSV dump and not a dashboard you have to learn.

Domains, hostnames, IP addresses and CIDR blocks. You'll be asked to prove you control the target before anything is scanned.

  • Ownership verified before any packet is sent
  • Every report read by an analyst
  • Findings deleted after 30 days
The process

Five steps, one of them yours.

Most of this is automated. The parts that decide whether a scan is legitimate, and whether a report is any good, are not — those are done by a person, on purpose.

Tell us what to scan

Give us a domain, a hostname, an IP, or a CIDR block. We validate the scope up front and tell you the price before you commit to anything.

Prove you control it

Publish a DNS TXT record or drop a file at a .well-known URL on the target. We check it automatically. For IP ranges, upload a signed authorisation instead — either way, nothing is scanned until the target is confirmed as yours.

Authorise payment

Checkout runs on Stripe; your card details never touch our systems. Your card is authorised, not charged — we only take the money once an analyst has confirmed your ownership evidence. If we can't verify it, the hold is released and you pay nothing.

We scan

Discovery, service fingerprinting, and then whichever specialist tools your environment actually warrants. Nothing destructive runs, ever — this is vulnerability scanning, not a penetration test.

You get a report

Findings are de-duplicated across tools, scored, and written up. An analyst approves the report before you ever see it. Download it from your portal any time in the following 30 days.

Coverage

A scanner suite, not a scanner.

Discovery runs first. What it finds decides which specialist tools run next, so a WordPress host gets checked like a WordPress host and a mail server doesn't.

Discovery and fingerprinting

Nmap maps what is actually listening, then httpx fingerprints the web services it found. Everything downstream keys off this rather than off guesses.

Vulnerability assessment

A full Greenbone/OpenVAS pass against every live host, covering tens of thousands of network vulnerability tests with confidence scoring on each result.

Templated CVE checks

Nuclei runs a continuously-updated template set against discovered services - known CVEs, default credentials, exposed panels and misconfigurations.

TLS and SSH configuration

testssl.sh enumerates every cipher, protocol version and certificate problem on your TLS endpoints; ssh-audit does the equivalent for SSH.

WordPress, when it's there

If discovery finds WordPress, WPScan enumerates the plugins, themes and versions in use, matched against the Wordfence vulnerability feed.

Written up, not dumped

Findings are de-duplicated across tools, severity-scored, and turned into prose. An analyst approves the report before it reaches you.

Why the extra steps

You can only scan what's yours. We check.

Plenty of services will scan whatever you type into a box. We verify the target belongs to you first, every time we perform a scan.

We ask for real proof through a DNS TXT record, or through a verification file on your web server. If you're scanning by IP directly, we ask for a signed statement of attestation instead, and a real person confirms it before the scanner is allowed near your infrastructure. Verification comes first: you're only charged once it's complete and your scan is cleared to run.

What we hold, and for how long

Report PDFs 30 days
Raw scanner output 30 days
Individual findings 30 days
Card details Never held

After 30 days the report file, the raw tool output and the findings are deleted from our systems. Download what you need before then — we cannot recover it afterwards.

Pricing

Priced by how much there is to scan.

A scan of one host is not the same job as a scan of a /24, so it isn't the same price.

Most common

Small estate

$249 CAD

Up to 16 addresses - a small office or a /28.

See what's included

Medium estate

$599 CAD

Up to 64 addresses - a /26 or a handful of subnets.

See what's included

Extended estate

$3,499 CAD

Above 256 addresses, up to the platform ceiling.

See what's included

Add a premium AI-written analysis or an intensive scan at checkout. All prices in CAD, before tax.

Ready when you are.

Put in a target, prove it's yours, and have a report in hand.

Create an account See pricing