Security and privacy findings you can prove.

OnScanner gives you security and privacy findings you can prove, built by Byte Optimizer. It runs a stack of specialist engines in parallel against targets you own or are authorized to test, unauthenticated or authenticated: web vulnerability detection (OWASP Top 10, plus CVE/CPE version matching enriched with EPSS exploit-probability and CISA KEV known-exploited context), privacy and tracker analysis across 40+ categories, technology fingerprinting, DNS/TLS and WAF posture, and email security (DMARC, DKIM, SPF). Results are live and never cached, and are delivered as a structured report, a JSON API response, or a PDF. The scan engines never call an LLM. AI Findings (included) sends the scan's findings to the hosted AI provider to write the summary, the prioritized risks and the attack-chain analysis. Selecting compliance analysis also sends the rule engine's verdict matrix to the hosted AI provider for the plain-language narrative, and the narrative never changes a verdict. With both off, nothing is sent to an AI provider.

OnScanner only scans targets that you explicitly add to your account. We perform non-intrusive analysis to help you identify security vulnerabilities and privacy risks before malicious actors do. All scans are authorized by the account owner. If you are the website owner and did not add it to our platform, please contact support@onscanner.com.

We offer three scan types: Security Scan (CVE detection, OWASP analysis, WAF fingerprinting), Privacy Scan (tracker detection, cookie analysis, consent evaluation), and Full Scan (comprehensive security + privacy analysis combined).

Each scan costs credits based on its type and options. A security or privacy scan costs 1 credit and a full scan 2 credits. Advanced mode adds 1, deep mode 2, subdomain discovery +2 to +10 credits, by the number of hosts you pick (10, 25, 50 or 100), and exploit verification 1 (included in Deep mode). AI Findings is included on every scan, and a compliance assessment adds 1 credit flat, which covers every framework you select on that scan. An account owner or admin turns them on in account settings, and only the scans that use one are charged for it. Credits can be purchased individually or included in your subscription plan. The Free plan gives 5 credits at signup, then topped up to 2 every 30 days. The top-up fills your plan credits back to 2 and adds nothing if you already hold 2 or more of them; credits you bought do not count. Free plan credits expire on a rolling 30-day window that renews with each top-up. Credits you buy are spent after plan credits and last twelve months from your latest purchase.

Yes. All scan data is encrypted in transit and at rest, stored securely, and only accessible to authorized users on your account. We do not sell your data. The scan engines never call an LLM. AI Findings (included) sends the scan's findings to the hosted AI provider to write the summary, the prioritized risks and the attack-chain analysis. Selecting compliance analysis also sends the rule engine's verdict matrix to the hosted AI provider for the plain-language narrative, and the narrative never changes a verdict. With both off, nothing is sent to an AI provider. The provider is contractually prohibited from training on your data.

Only if you choose to. The scan engines never call an LLM. AI Findings (included) sends the scan's findings to the hosted AI provider to write the summary, the prioritized risks and the attack-chain analysis. Selecting compliance analysis also sends the rule engine's verdict matrix to the hosted AI provider for the plain-language narrative, and the narrative never changes a verdict. With both off, nothing is sent to an AI provider. Payment data, login credentials, and raw screenshots are never sent. The provider is contractually prohibited from training on your data.

A privacy scan loads your website in a real browser and records third-party trackers, cookies, fingerprinting techniques, session recorders and the consent platform in use. It generates a privacy score and names specific tracking scripts from services like Google Analytics and the Meta Pixel. In advanced and deep modes it also clicks Reject all and Accept all on your consent banner and compares what loads, and checks whether the site honors the Global Privacy Control signal.

Yes. Scheduled scanning is available on every plan, including the Free plan. You can configure daily, weekly, or monthly automated scans on any of your targets, and continuous monitoring tracks what changes between runs. Pro includes 3 monitored sites, Business 10 and Enterprise every site, each with a free weekly scan. On paid plans a monitor also emails an alert when something changes for the worse.

Yes. OnScanner provides a full REST API and an MCP server that let you programmatically create scans, retrieve results, and manage targets. API keys can be generated from your dashboard.

Yes. OnScanner runs a Model Context Protocol (MCP) server at mcp.onscanner.com/mcp over Streamable HTTP, so Claude, Cursor, Claude Code, and any MCP-compatible AI agent can drive scans directly. Authenticate by sending your OnScanner API key in the ONSCANNER-KEY header (or as a Bearer token). The server exposes eleven tools: list_targets, create_target, get_target, start_scan, list_scan_locations, list_scans, get_scan_status, get_scan_results, verify_deployment, get_scan_ai_analysis, and get_scan_compliance. A typical agent flow is create_target, start_scan, poll get_scan_status until SCAN_COMPLETED, then get_scan_results. verify_deployment gates a release: it scans a preview or staging deployment and compares it against a baseline scan of production. Usage is billed in the same per-scan credits as the web app, and you may only scan targets you own or are authorized to test. See the MCP guide.

You can purchase additional credits at any time, or enable auto-refill to automatically top up your balance when it drops below a threshold. Scheduled scans will pause if your credit balance is insufficient.

OnScanner combines specialist engines covering security, privacy, technology fingerprinting, WAF, CVE/CPE matching, DNS, email security, and infrastructure into one platform with live, never-cached results, across unauthenticated and authenticated scans, rather than a single generic crawler. Findings are prioritized with EPSS exploit-probability and CISA KEV context and checked for patch status and end-of-life, so you can tell a genuinely exploitable issue from noise. It is built for automation: a full REST API and an MCP server let Claude, Cursor, and other AI agents run scans directly. The scan itself never calls an LLM, and optional AI Findings can summarize and correlate the results when you turn them on.

Yes. Team accounts come with role-based access control (Owner, Admin, and Member roles). Enterprise plans add custom credit allotments and dedicated support. Contact our sales team for a custom quote.

You can reach our support team through the contact form below or by email at support@onscanner.com. Pro, Business and Enterprise customers can also open support tickets from the dashboard.