Can I scan single page applications (SPAs) with Intruder?

Yes, Intruder can scan single page applications. For more details, visit the help documentation.

How do I scan my website for vulnerabilities with Intruder?

The first thing you need to do is add your website as a target by entering its IP address or url. You can then kick off your first scan in just a few clicks – it's that simple!

What website security checks does Intruder perform?

Intruder performs comprehensive security checks including SQL injection scanning, cross-site scripting (XSS) detection, and many other vulnerability assessments.

What do you mean by scanning your website, internally?

Your internal systems can be just as enticing to hackers as your external network so it's important to test your website for vulnerabilities there too. When we talk about scanning the website internally, we're actually talking about scanning the web server that the website is hosted on. Web servers are internet-facing, but any sensitive information connected to them (such as databases) will sit behind a firewall, to prevent them from being reached by unauthorized individuals. At Intruder, all local/internal checks are performed via an agent which you'd install on the server.

Can I scan my website if it is built using a CMS, such as WordPress?

Intruder works with many platforms, including WordPress, Drupal, Joomla, Squarespace and more.

Which plan should I choose if I just want to scan my website?

Visit the pricing page to find the plan that best suits your website scanning needs.

What license should I buy for a website that doesn't have a login-page?

Visit the pricing page to determine the appropriate license for your specific use case.

Intruder for

Automated Penetration Testing for Fast-Moving Teams

Intruder continuously tests your infrastructure, web apps, and APIs for the vulnerabilities that matter most - giving you always-on coverage, not just a point-in-time report.

Get a Demo

Try for free

Results in hours, not weeks

Get actionable findings immediately - no waiting for an engagement to start or a report to land.

Stay ahead of emerging threats

When new vulnerabilities are announced, Intruder checks your systems automatically - so you know your exposure before exploits spread.

Always-on coverage

Continuous checks between manual pen tests, so new risks don't sit undiscovered for months.

Automated Penetration Testing for Fast-Moving Teams

Try for free

Know if you'd pass an audit before the auditor asks

Intruder checks for the issues auditors care about - exposed services, missing encryption, unpatched software - and generates compliance-ready reports for SOC 2, ISO 27001, or HIPAA without manual evidence gathering.

See What a pen tester sees, every day

From finding to fixing, without the back and forth

Find what's exposed, fix what matters, and stay ahead of new threats

External Scanning

Infrastructure Security

Attack Surface Monitoring

Respond to changes

CSPM

Daily cloud config checks

Asset Discovery

Reveal unknown targets

DAST

Secure web apps

Risk Based Prioritization

No more alert fatigue

Cyber Hygiene Reporting

Demonstrate progress

Emerging Threat Detection

Check and act fast

Container Image Scanning

Automated image discovery

Secrets Detection

Prevent leaked credentials

Website Security

140k+ checks

API Security

Test your APIs

Compliance

SOC 2, ISO, HIPAA, DORA

Internal Scanning

Secure employee devices

Our customers love Intruder

Emerging Threat Scans are a game changer. They let us stay on top of everything, without hours spent checking sources or reconfiguring platforms. Having full visibility into what's externally exposed has massively increased our confidence.

Pawel Sieradzki

Global IT Director, Brainlabs

If you leave room for doubt in the sales process, you can derail the entire deal. I wanted security to be something we look forward to prospects asking about. Now the security review is one of the fastest parts of the deal stage.

Zach Rattner

CTO & Co-founder, Yembo

I want to take us out of the equation completely from a process perspective. We're not the nagging manager anymore, we just monitor and make sure things are progressing. When my CIO asks where we stand, I can tell him straight away: no highs, no criticals.

Sunil Patel

ISO, River Island

One platform. Continuous security.

Try for free Get a demo

What checks does Intruder perform?

Intruder checks your systems for 170,000+ infrastructure weaknesses (such as remote code execution flaws), 75+ web-layer security issues (such as SQL injection and cross-site scripting), and other misconfigurations (such as weak encryption and services that are unnecessarily exposed). Learn more about what checks we run.

How do emerging threat scans work?

Intruder's emerging threat scans check your systems for newly discovered vulnerabilities automatically, as soon as a check is available. You'll know whether you're exposed without lifting a finger, with no need to research the latest threats or run scans manually. Learn more.

What scanning engine does Intruder use?

Intruder is powered by industry-leading scanners, including Tenable, Nuclei, OpenVas, and ZAP. Learn more.