Free scan · no account
Paste five components. Get the real answer.
The same resolver, the same advisory sources and the same ranking a paying customer gets — run on what you paste, and kept nowhere. No account, no card, no email.
Don’t have a list handy?
Run one of these on the machine you want to check. Each prints five components in a format this scanner reads, and none of them send anything anywhere — you decide what to paste.
Every installed system package and its version.
dpkg-query -W -f='${Package} ${Version}\n' | head -5Printsopenssl 1.1.1k-1ubuntu2
Same idea through rpm.
rpm -qa --qf '%{NAME} %{VERSION}\n' | head -5Printsopenssl 1.1.1k
apk prints name-version-release; the sed splits it into two fields.
apk info -v | sed -E 's/^(.*)-([0-9][^-]*-r[0-9]+)$/\1 \2/' | head -5Printsopenssl 1.1.1k-r0
Anything in the form name version, name==version, name@version or a package URL works. A name on its own does not — without a version there is no range to compare it against, and the scanner reports that rather than guessing.
ON THE TEAM PLAN
Three more modules, and no five-component ceiling.
These are not run here. Binary analysis needs an upload and website testing sends requests to a target you must be authorised to assess — neither belongs behind an anonymous form. The lines below are examples of the output, not results for you.
Native binary assurance
PE, ELF and Mach-O hardening, signature structure and redacted secret signals across 15 checks.
EXAMPLEBIN.PE.DEP · failed · DEP is not enabledAPI contract audit
OpenAPI and Swagger transport, authentication coverage, inventory and resource limits. 13 checks, no packets sent.
EXAMPLEAPI.AUTH.COVERAGE · warn · 4 operations declare no securityWebsite testing
Transport, browser security policy and cookie attributes on one authorised page, under a hard request budget.
EXAMPLEheader.csp · failed · No Content-Security-Policy observed