Intruder for
DAST that respects your time
Intruder’s DAST scanner runs 100 checks across authenticated web apps and APIs, finding vulnerabilities like SQL injection, XSS, and CSRF before attackers do.

Join 3,000+ companies securing their attack surface with Intruder





























































Find vulnerabilities where they hide
Authenticated pages and APIs are where the most sensitive functionality lives. Intruder scans them so nothing exploitable goes undetected.

Act fast on what needs your attention
Intruder filters out noise and prioritizes by risk. No alert fatigue, just clarity on what actually matters.

Less chasing, more fixing
Issues are explained in plain English with step-by-step remediation advice to help devs fix without waiting on security.

Security that moves at the speed of your sprints
Simple to set up, however your app is built
Get started with just a domain or IP. Intruder supports custom and complex web apps (including SPAs) and a wide range of authentication methods. Scan every API endpoint by uploading your OpenAPI or Swagger schema.
From finding to fix, without the friction
Schedule scans to match your release cadence. Push issues directly to Jira, GitHub, GitLab, Azure DevOps, or ServiceNow, and integrate into your CI/CD pipeline via our API. Verify fixes quickly with targeted rescans.
Compliance evidence, ready to go
Download reports to meet SOC 2 and ISO 27001 compliance requirements. Send vulnerability scan evidence directly to Drata or Vanta.



Find what's exposed, fix what matters, and stay ahead of new threats
External Scanning
Infrastructure Security
Attack Surface Monitoring
Respond to changes
CSPM
Daily cloud config checks
Asset Discovery
Reveal unknown targets
DAST
Secure web apps
Risk Based Prioritization
No more alert fatigue
Cyber Hygiene Reporting
Demonstrate progress
Emerging Threat Detection
Check and act fast
Container Image Scanning
Automated image discovery
Secrets Detection
Prevent leaked credentials
Website Security
140k+ checks
API Security
Test your APIs
Compliance
SOC 2, ISO, HIPAA, DORA
Internal Scanning
Secure employee devices

.avif)
.avif)
.avif)