# Vulscan

> Vulscan is a passive external web security scanner for European small and
> mid-sized businesses. It runs 20+ automated checks (TLS/HTTPS, security
> headers, DNS and email authentication, exposed files, WordPress hygiene) in
> under 30 seconds — no installation, account, or credential exchange required.
> Free one-shot scans run from the homepage; recurring monitoring (Watch) is in
> preview. Operated by HRUBY Software s.r.o. (Czech Republic).

## Product

- [What we check](https://vulscan.app/en/#checks): the full check matrix on the homepage.
- [Live demo scan](https://vulscan.app/scan/badexample.vulscan.cz): a scan permalink for an intentionally vulnerable demo target.
- [Watch — recurring monitoring](https://vulscan.app/watch): the paid continuous-monitoring product (currently in preview; Czech-language page).

## Landing pages (Czech)

- [Website security audit](https://vulscan.app/audit): general-purpose audit for any domain.
- [WordPress audit](https://vulscan.app/wordpress-audit): WordPress-specific hygiene checks.
- [E-shop audit](https://vulscan.app/eshop-audit): cookie, consent, and payment-page checks for online stores.
- [TLS / security-header test](https://vulscan.app/ssl-test): TLS, HSTS, and response-header inspection.
- [NIS2 / ZoKB scan](https://vulscan.app/nis2-audit): external attack-surface scan framed for the Czech NIS2 transposition.

## Comparisons

- [Vulscan vs Hardenize](https://vulscan.app/en/vs/hardenize): honest side-by-side for SMBs.
- [Vulscan vs Detectify](https://vulscan.app/en/vs/detectify): honest side-by-side for SMBs.
- [Vulscan vs ImmuniWeb](https://vulscan.app/en/vs/immuniweb): honest side-by-side for SMBs.

## Documentation

- [Docs portal](https://vulscan.app/en/docs): per-check explainers with remediation steps for every finding the scanner reports.

## About and legal

- [About Vulscan](https://vulscan.app/en/about): what the scanner is and how it works.
- [Privacy policy](https://vulscan.app/en/privacy)
- [Terms of service](https://vulscan.app/en/terms)
- [Bot policy + robots.txt opt-out](https://vulscan.app/bot.html): how to opt a domain out of scanning.
- Operator: HRUBY Software s.r.o. (IČO 05131375), Czech Republic — hello@vulscan.app