Can I scan single page applications (SPAs) with Intruder?

Yes, Intruder can scan single page applications. For more details, visit the help documentation.

How do I scan my website for vulnerabilities with Intruder?

The first thing you need to do is add your website as a target by entering its IP address or url. You can then kick off your first scan in just a few clicks – it's that simple!

What website security checks does Intruder perform?

Intruder performs comprehensive security checks including SQL injection scanning, cross-site scripting (XSS) detection, and many other vulnerability assessments.

What do you mean by scanning your website, internally?

Your internal systems can be just as enticing to hackers as your external network so it's important to test your website for vulnerabilities there too. When we talk about scanning the website internally, we're actually talking about scanning the web server that the website is hosted on. Web servers are internet-facing, but any sensitive information connected to them (such as databases) will sit behind a firewall, to prevent them from being reached by unauthorized individuals. At Intruder, all local/internal checks are performed via an agent which you'd install on the server.

Can I scan my website if it is built using a CMS, such as WordPress?

Intruder works with many platforms, including WordPress, Drupal, Joomla, Squarespace and more.

Which plan should I choose if I just want to scan my website?

Visit the pricing page to find the plan that best suits your website scanning needs.

What license should I buy for a website that doesn't have a login-page?

Visit the pricing page to determine the appropriate license for your specific use case.

Smash 25% off your first AI pentest with SMASHING25

Exclusive to Smashing Security listeners. Use code SMASHING25 at checkout.

GET STARTED

Keep up with engineering

A manual pentest is out of date almost the moment it's signed off. AI pentesting agents help ensure security keeps up with every deploy.

No lead time pentesting

Manual pentests are slow, AI pentesting isn’t. Scope, test and get an audit-ready report in hours.

Get more from your pentesting budget

AI pentests are a fraction of the cost of manual pentests, meaning you can test more frequently and close your window of exposure.

From a scan flag to a confirmed risk

GET STARTED

White box pentesting

Connect your code repository via GitHub or GitLab, provide any context and credentials and launch a scan in minutes.

Audit-ready reporting

Get a comprehensive pentest report that can be used as evidence for compliance frameworks including SOC 2 and ISO 27001.

Issue level investigations

Automate the triage and investigation of issues and eliminate false positives with micro pentesting investigations that go deep on specific findings surfaced by Intruder.

Find what's exposed, fix what matters, and stay ahead of new threats

External Scanning

Infrastructure Security

Attack Surface Monitoring

Respond to changes

CSPM

Daily cloud config checks

Asset Discovery

Reveal unknown targets

DAST

Secure web apps

Risk Based Prioritization

No more alert fatigue

Cyber Hygiene Reporting

Demonstrate progress

Emerging Threat Detection

Check and act fast

Container Image Scanning

Automated image discovery

Secrets Detection

Prevent leaked credentials

Website Security

140k+ checks

API Security

Test your APIs

Compliance

SOC 2, ISO, HIPAA, DORA

Internal Scanning

Secure employee devices

Our customers love Intruder

Emerging Threat Scans are a game changer. They let us stay on top of everything, without hours spent checking sources or reconfiguring platforms. Having full visibility into what's externally exposed has massively increased our confidence.

Pawel Sieradzki

Global IT Director, Brainlabs

If you leave room for doubt in the sales process, you can derail the entire deal. I wanted security to be something we look forward to prospects asking about. Now the security review is one of the fastest parts of the deal stage.

Zach Rattner

CTO & Co-founder, Yembo

I want to take us out of the equation completely from a process perspective. We're not the nagging manager anymore, we just monitor and make sure things are progressing. When my CIO asks where we stand, I can tell him straight away: no highs, no criticals.

Sunil Patel

ISO, River Island

One platform. Continuous security.

Try for free Get a demo

How do I redeem the 25% discount?

1. Start a free trial.

2. Once you're in, click Pentests (under Assessment) in the left-hand navigation and follow the steps to set up your test.

3. At checkout, enter the code SMASHING25 to get 25% off.

That's it!