YANSII — Your Adaptive Next-Step Intelligent Inspector

AI-powered passive security scanner for bug bounty hunters. 46 scanners, AI copilot, request replay, and traffic analysis.

YANSII is a passive security scanner for bug bounty hunters. It runs in your browser, detects vulnerabilities as you browse, and suggests what to test next. FREE (no account needed): - 46 passive scanners — XSS, SQLi, CORS, SSRF, IDOR, open redirect, header and cookie analysis - Three-tier detection: Detected → Validated → Confirmed - Dashboard with domain grouping, severity filtering, and search - Auto-crawl with depth, speed, and auth controls - WebSocket and postMessage capture - Side panel, DevTools panel, and full dashboard - Export findings as JSON or markdown - Target scope enforcement PRO (subscription): - AI Copilot — real-time hunting suggestions powered by pattern memory - AI Deep Dive — detailed vulnerability analysis on any finding - AI Verify — false positive filtering before you waste time - Request Replay — modify headers, cookies, body and resend - Role Comparison — diff access across Admin, User, Unauth - Parameter Discovery — find hidden inputs and mass assignment - GraphQL Scanner — introspection and resolver testing - Report Builder — professional reports for submissions - Claude Code Bridge — MCP data sync with Claude Code CLI - AI JS + Request Analysis — automated secret and auth issue detection - Agentic Memory — learns patterns across sessions and targets AI features use your own API key (Anthropic, OpenAI, Groq, or OpenRouter). Your key, your costs — nothing sent to YANSII servers. PRIVACY: All findings stay local on your device. No analytics, no telemetry. License validation is the only server communication. The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. For authorized security testing only. Unauthorized testing may violate computer fraud laws. https://yansii.in