Never be scared of
Web security again.
Your trusted web vulnerability scanners to secure your web assets.
24/7.
Used by 20+ customers
NEW VULNERABILITY ALERT!
CERTAINTY: 99%
Proof of Concept:
Steps to reproduce:
- 1. Navigate to
- 2. Click on
- 3-day free trial. Enterprise?
- Actionable reproduction & mitigation steps
- Extensive REST API access
Remember that feeling when you receive a
NEW VULNERABILITY ALERT!
CERTAINTY: ???
Proof of Concept:
Steps to reproduce:
- 1. Navigate to
- 2. Click on
but find out that it is a false positive...
We can help you get rid of them.
How it works
New Vulnerability
Validator Engine
Every vulnerability found gets passed to the Validator Engine and filters all false positive results.
Benefits:
- Clear & easy to reproduce steps (with actionable steps + PDF exports)
- No false positive results
- Actionable mitigation recommendations
For Builders and Breakers
Security solutions tailored to you.
- Map out and Protect all your web assets.
24/7. - Track changes, scan assets for security vulnerabilities, and get notified (on time). A seamless and simple automated workflow that simplifies everything for you to avoid costly security breaches.
- Find more valid security vulnerabilities.
- Your own platform that automates most of your work for you. From reconnaissance to actual vulnerability scanning. Allowing you to broader your attack surface, and help you find even more security vulnerabilities with low-to-zero false positives.
Never be scared of web security ever again
Transform your DevOps team into a DevSecOps
- CI/CD Integration
- Spot security risks early on in your development cycle with our integrated API and transform your DevOps team into DevSecOps. We'll help you along the way. Don't worry ;)!
- Ease of use
- We simplified the whole process. From gathering intel, to detecting and resolving vulnerabilities. Even the scanner is cloud-based so you don't have to spend time setting it up.
- Instant Notifications
- Receive instant notifications on found vulnerabilities via Webhook, Email, Slack or Discord.
- Privacy
- Your data is yours and will stay yours. We do not collect any of your scanning data for our own use.
Launch your own automation framework
Without having to manage it.
- API
- Initiate scans, schedule them or even query scan data using the built-in API. Take 0-day and 1-day hunting to a whole new level.
- Instant Notifications
- Receive instant notifications on found vulnerabilities via Slack, Discord, Email or Telegram.
- Daily fresh intel
- Daily fresh intel to keep up with the latest changes. Available on your dashboard whenever you want.
- Privacy
- Your data is yours and will stay yours. We do not collect any of your scanning data for our own use.
Scanners
Access to highly-reliable tools.
- XSScannerCross-Site Scripting Scanner
Highly reliable cross-site scripting tool that can find basic to advanced reflected XSS vulnerabilities, for now. You only get notified once a valid issue has been found.
- SPIDER XContent Discovery
All-in-one cloud-based solution to gather data around a target. We implemented a lot of methods so the "hidden content" reveals itself.
- REDIRECT XOpen Redirect Scanner
Advanced open redirect scanner that is capable of scanning server-side & DOM-based open redirect vulnerabilities. Your customers can fall for phishing attacks, it's time to take action.
CNAME XSubdomain Takeovers
Scan & identify subdomain takeover vulnerabilities on your domains before they get used by bad actors to target your customers.
CORSCANNERCORS Misconfiguration Scanner
Blazing-fast cloud-based CORS misconfiguration scanner to scan thousands of URLs for CORS misconfigurations.
BirdWatchWeb Asset Monitor
Powerful yet a simple cloud-based solution to gather as many intel of your target & monitor for daily or hourly changes.
CWE-79
XSSCANNER
XSScanner imitates a real-world penetration tester. From identifying a potential injection point to providing a detailed, well-written report.
Whether you're a defender or attacker, you want this tool as your co-pilot.
- Simulate a pentester
- Simulate a penetration tester's behaviour by performing a series of tests to identify and exploit a cross-site scripting vulnerability.
- Latest WAF bypasses
- A payload set that includes XSS payloads ranging from basic to advanced to the recently discovered web application firewall bypasses.
- Instant Notifications
- Receive notifications immediately once XSScanner discovers a cross-site scripting vulnerability. Even when your vulnerability scan is still running.
CWE-601
REDIRECT X
Like the XSScanner, Redirect X simulates an actual penetration tester's testing procedure. And it shows.
Redirect X is capable of finding context-based, multi-step, Server-side, POST-based and DOM-based redirects. With low to zero false positive results (as all our tools are).
- Simulate a pentester
- Simulate a penetration tester's testing procedure by performing a series of tests to identify and exploit a cross-site scripting vulnerability.
- Advanced payload set
- Evade strict, context-based filters with our personalised wordlist generated for each new scan.
- Instant Notifications
- Receive notifications immediately once Redirect X discovers an open redirect vulnerability. Even when your vulnerability scan is still running.
CWE-942
CORSCANNER
CORScanner is capable of finding high-level CORS misconfigurations that could be exploited by bad actors to gain access to private user data.
- Simulate a pentester
- Simulate a penetration tester's behaviour by performing a series of tests to identify and exploit a cross-origin resource sharing misconfiguration.
- Advanced pattern bypasses
- A set of payloads that are used for bypassing most common cases of loosely-set regex patterns but also more advanced cases (including forgotten third-party whitelisted domains).
- Instant Notifications
- Receive notifications immediately once CORScanner discovers a CORS Misconfiguration vulnerability. Even when your vulnerability scan is still running.
Reconnaissance
ASM Platform
Fully Automated
A seamless automated experience that requires little to no input from you. But does uncover security anomalies.
Technology Fingerprinting
Map out and filter hosts based on technologies. Making monitoring for new CVEs as easy as it can get.
Daily Notifications
Track changes and receive daily updates to stay on top of everything. From new hosts to response changes.
Notifications API
Receive instant notifications once a vulnerability was found and validated!
- Email
- Discord
- Slack
- Telegram
Receive push notifications on your favourite messaging app of
found vulnerabilities or new subdomains!
CLI
Extensive API
Our extensive async API is capable of starting, retrieving, querying and deleting scans and scan data.
curl -s https://api.novasec.io/api/hosts?q=*.novasec.io \
-H 'X-API-Key: $API_KEY' | jq -r '.data[]'
novasec.io
app.novasec.io
docs.novasec.io
...
Reviews
Look at what our clients are saying about us
@lu3ky13Lu3ky13 ⚡️⚡️
I liked the timed scanning & scheduling
@Thee_EclipseThee Eclipse
The website is awesome, gives a great visual analysis of the target, and is comprehensive in recon and efficient, especially the Spider X. Timely notifications and a user has full control of their account
@thedaniuxxDanny
I am using novasec for recon and I am very happy with it, it is easy to use, plus it has some very interesting tools that I have not seen elsewhere, highly recommended.
@HawkEye00888713Hawk_Eye
This tool is marvelous for recon subdomain gathering and content discovery with very fast output and I really liked that.
@falcon_charan0xcharan
I recently had the opportunity to try out the Nova Security service and I must say, I was thoroughly impressed with its XSS tools and open redirect functionality. What sets Nova Security apart from other similar services is its unique approach of checking for reflection before crafting payloads.
Newsletter
Subscribe to our newsletter.
And receive exclusive content in your inbox.
- Product updates
- Receive exclusive news about upcoming product launches and new tools in your inbox!
- Web Security Content
- Read about interesting attack vectors and exploitation methods found on modern web application services.
FAQ
Got questions? We're here to help.
What is vulnerability scanning?
Vulnerability scanning is a process where an automated program is looking for vulnerabilities and security misconfigurations in your web application or network.
Usually, vulnerability scanners execute a predefined workflow to identify any exploitable vulnerability type.
Once a vulnerability scanner has found and verified a valid security flaw, it creates an alert and reports the finding accordingly.
What are false-positive results?
False positives are an incorrect indication of the presence of a vulnerability. For example, a vulnerability scanner may notify you of a Reflective Cross-Site Scripting (CWE-79) vulnerability available as it was successfully able to inject a payload in a document with a non-executable content type (like text/plain). However, the payload will unlikely work as the browser won't render the response as HTML.
We solve this issue by validating every vulnerability found before notifying you (so you don't have to get excited and later realize that it was for nothing).
What do you mean by false-positive free?
Most (vulnerability) scanners can contain false-positive results. We can easily remove them from your results as we pass them to our robust Validator Engine. A service capable of validating all types of vulnerabilities before determining their presence and exploitability in a real-world scenario.
How long does a full website security scan take with Nova Security?
This truly depends on how big and complex your web application or API is and your scan configuration.
How many scans am I allowed to run?
You can perform as many scans as you want but we do have some limitations on the number of concurrent (parallel) scans. Check out our pricing plan for more information.
How often should I run a scan?
You can scan your web application as many times as you want.
However, we do recommend you at least scan your web application each time you push new code.
How does the scanner compare to other scanners on the market?
Throughout our years of experience as web app penetration testers and bug bounty hunters
We sometimes used third-party vulnerability scanners to automate some of our workflows, and it didn't work out well for us.
We had times when we found vulnerabilities while some vulnerability scanners just couldn't, even after pointing out where to scan.
This never allowed us to put our trust in vulnerability scanners. And we found that this should change.
Today, Nova Security is capable of finding vulnerabilities in various contexts, vulnerabilities that otherwise would've been left undetected by other scanners.
That is one key element that sets us apart from our competitors. It's our unfair advantage.
Will the scanner integrate with my current workflow and tools?
Nova Security provides an API in place for you to use in your development cycle.
This will allow your team to fully automate the vulnerability scanning process.
Is Nova Security capable of scanning authenticated parts of my website?
Yes, we even encourage you to do so to uncover any hidden security flaws that may have had devastating effects if they're left untouched.
Will the scanner cause any disruption to my website or web application?
No. We give you the option to set a rate limit to not put excessive load on your server.
What happens with my scan data?
We do not process your private scan data for our own gains. One of our core values is "Privacy", and you will always have full control of your data.
Does Nova Security encrypt data?
Yes, by default, your data is encrypted at rest (AES) and in transit (TLS).
Join today and start scanning your
targets for vulnerabilities
With low-to-zero false positives
Used by 20+ customers