VulnRadar Website Scanner

One-click vulnerability scanning for any website you visit. Powered by VulnRadar.

VulnRadar scans the site you're on and tells you what's actually wrong with it: missing security headers, expired or misconfigured TLS, exposed secrets in JS bundles, weak CSP, leaky CORS, SPF/DKIM/DMARC gaps, exposed .env and .git directories, subdomain takeover indicators, and more. 700+ checks, run against the tab you're already looking at. Click the icon, hit Scan. Quick mode checks the one page you're on. Deep mode crawls the site and checks every same-origin page it finds. Results come back with severity, a plain explanation of what's broken, and how to fix it, not a letter grade with no context. Beyond the scan button: - Auto-scan on page load, on tab focus, or on URL change, all off by default, you turn on what you want - A quiet signal when you land on a site you've already scanned, so you're not re-scanning the same thing - A prompt to scan sites you haven't been to before, if you want it (toggle each independently, or snooze for 24 hours) - Right-click any link to scan it without opening it - Ctrl+Shift+U (Cmd+Shift+U on Mac) opens the scanner from anywhere You'll need a free VulnRadar account and an API key. Paste it once in Settings and every scan after that is one click. The scanner is open source (GPL-3.0) and the backend is self-hostable, so if you'd rather not send URLs to our servers, you don't have to.