LegitShow is the trusted source on every newly launched software product: what it does, who it’s for, how it actually holds up, and whether the AI engines are already reading it. Built to be what AI cites.

Web apps, SaaS, AI tools, MCP servers and developer tools. How we measure →

Legit.Show benchmarks every launched service it lists — measured deterministically from the public surface. See the methodology →

Cross-links · Directory · Reports · Insights · What AI reads · Methodology · About

Privacy · Terms · @Legit_Show on X · GitHub · operated by Madeflo Inc., a Delaware corporation. Benchmark engine powered by commit.show.

Ranked by measurement

Best website vulnerability scanner

30 tested · top 30 shown

Ordered by a seven-frame production-readiness benchmark measured from each product's public surface — not popularity, pricing or feature count. Nobody pays to appear here and the order is never edited. How it is measured →
How this field scores
low 56median 87best 99
  1. 1
    StackSecured
    Security audit tool that scans web apps for vulnerabilities caused by AI-generated code.
    Perf 100
    Acce 94
    Sec 100
    Priv 100
    Rel 100
    Std 100
    Disc 100
    stacksecured.com · measured 2026-11-02
    7/7 frames
  2. 2
    Hexora
    Hexora scans websites for security vulnerabilities and provides AI-ready fix prompts.
    Perf 97
    Acce 91
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 100
    hexora.uk · measured 2026-10-26
    7/7 frames
  3. 3
    CyberReflex
    CyberReflex scans public websites to surface security risks and generate developer-ready fix patches.
    Perf 99
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 85
    Disc 87
    cyberreflex.com · measured 2026-11-02
    7/7 frames
  4. 4
    Site is OK?
    Site is OK? checks website health, DNS, SSL, and email configuration.
    Perf 100
    Acce 93
    Sec 100
    Priv 100
    Rel 75
    Std 100
    Disc 100
    siteisok.com · measured 2026-11-01
    7/7 frames
  5. 5
    Sitelemetry
    Website audit platform covering security, SEO, accessibility, and AI visibility.
    Perf 87
    Acce 94
    Sec 100
    Priv 100
    Rel 100
    Std 86
    Disc 100
    sitelemetry.com · measured 2026-11-09
    7/7 frames
  6. 6
    Ultimate WP Audit
    WordPress site auditing tool with 258+ checks across 18 categories.
    Perf 93
    Acce 88
    Sec 100
    Priv 100
    Rel 100
    Std 86
    Disc 100
    wpaudit.cc · measured 2026-11-08
    7/7 frames
  7. 7
    Veridome Surface
    Veridome Surface is an external security scanning layer for web applications.
    Perf 94
    Acce 100
    Sec 100
    Priv 100
    Rel 75
    Std 97
    Disc 100
    surface.veridome.io · measured 2026-10-28
    7/7 frames
  8. 8
    PHP emergency patch
    Free tool to check whether a website's PHP version is patched against a critical flaw.
    Perf 92
    Acce 91
    Sec 100
    Priv 75
    Rel 100
    Std 97
    Disc 100
    simgen.dev · measured 2026-11-07
    7/7 frames
  9. 9
    WebsiteScanner
    Free website security scanner that checks SSL, email spoofing, and vulnerabilities.
    Perf 71
    Acce 94
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 100
    websitescanner.dev · measured 2026-11-04
    7/7 frames
  10. 10
    Nexora Shield
    AI-powered scanner that checks websites for security issues and generates PDF reports.
    Perf 74
    Acce 97
    Sec 100
    Priv 100
    Rel 100
    Std 81
    Disc 100
    nexorashield.site · measured 2026-10-29
    7/7 frames
  11. 11
    WP Triage
    WordPress risk scoring tool that ranks vulnerabilities by priority across multiple sites.
    Perf 100
    Acce 97
    Sec 55
    Priv 100
    Rel 100
    Std 89
    Disc 100
    wptriage.app · measured 2026-11-02
    7/7 frames
  12. 12
    ShipTight
    Launch-safety scanner for AI-built web apps, free to start.
    Perf 100
    Acce 100
    Sec 100
    Priv 100
    Rel 100
    Std 92
    Disc 47
    shiptight.dev · measured 2026-11-02
    7/7 frames
  13. 13
    VulnWatch
    VulnWatch offers on-demand and automated vulnerability scanning for websites.
    Perf 82
    Acce 95
    Sec 80
    Priv 75
    Rel 100
    Std 92
    Disc 100
    vulnwatch.tech · measured 2026-10-28
    7/7 frames
  14. 14
    SecURL
    SecURL grades any URL's external security posture from A to F instantly.
    Perf 99
    Acce 88
    Sec 100
    Priv 70
    Rel 67
    Std 92
    Disc 100
    securl.online · measured 2026-11-07
    7/7 frames
  15. 15
    AuditPulse
    AuditPulse runs automated security audits on websites, checking 18 vulnerability categories.
    Perf 98
    Acce 95
    Sec 100
    Priv 25
    Rel 92
    Std 97
    Disc 100
    brokehealth.com · measured 2026-11-09
    7/7 frames
  16. 16
    digitup
    digitup monitors websites for security issues, uptime, and broken user flows.
    Perf 97
    Acce 96
    Sec 25
    Priv 100
    Rel 100
    Std 92
    Disc 100
    digitup.dev · measured 2026-10-28
    7/7 frames
  17. 17
    FreeDAST
    FreeDAST runs a free external security scan of your website and returns a letter grade with plain-language fin
    Perf 91
    Acce 93
    Sec 75
    Priv 100
    Rel 92
    Std 85
    Disc 72
    freedast.com · measured 2026-11-05
    7/7 frames
  18. 18
    Xalgorix
    Automated security scanning service billed by credits, with a 22-phase offensive methodology.
    Perf 63
    Acce 100
    Sec 60
    Priv 100
    Rel 100
    Std 89
    Disc 100
    xalgorix.com · measured 2026-11-04
    7/7 frames
  19. 19
    image
    PortSwigger makes Burp Suite, a web application security testing and scanning toolkit.
    Perf 83
    Acce 88
    Sec 90
    Priv 45
    Rel 100
    Std 86
    Disc 85
    portswigger.net · measured 2026-11-10
    7/7 frames
  20. 20
    SitePulse
    Free website scanner that checks security, SEO, performance, and accessibility.
    Perf 96
    Acce 93
    Sec 100
    Priv 25
    Rel 75
    Std 100
    Disc 85
    sitepulse.freebuff.app · measured 2026-11-02
    7/7 frames
  21. 21
    FFUF — Web Fuzzer
    Browser-based web fuzzing tool that routes requests through a server-side proxy.
    Perf 99
    Acce 82
    Sec 45
    Priv 75
    Rel 100
    Std 92
    Disc 72
    ffuf.codewithneo.com · measured 2026-11-06
    7/7 frames
  22. 22
    Sensagraph
    Sensagraph is a web security scanning service for domains and web applications.
    Perf 62
    Acce 92
    Sec 25
    Priv 100
    Rel 100
    Std 100
    Disc 90
    sensagraph.com · measured 2026-10-27
    7/7 frames
  23. 23
    TripleKey
    Automated security scanning and vendor risk monitoring for web applications.
    Perf 67
    Acce 85
    Sec 80
    Priv 75
    Rel 100
    Std 89
    Disc 72
    triplekey.com · measured 2026-11-06
    7/7 frames
  24. 24
    hackymacky
    Scans public websites for leaked secrets in client bundles and exposed Supabase permissions.
    Perf 92
    Acce 100
    Sec 20
    Priv 100
    Rel 100
    Std 92
    Disc 45
    hackymacky.vercel.app · measured 2026-11-10
    7/7 frames
  25. 25
    ScrapTrap WAF
    Free HTTP header audit tool for checking security and performance headers.
    Perf 100
    Acce 75
    Sec 65
    Priv 25
    Rel 100
    Std 74
    Disc 90
    scraptrap.de · measured 2026-11-07
    7/7 frames
  26. 26
    flaw.co by Paying.co
    Free external security scan for domains, with paid deep scanning options.
    Perf 72
    Acce 95
    Sec 25
    Priv 25
    Rel 100
    Std 92
    Disc 100
    flaw.co · measured 2026-10-04
    7/7 frames
  27. 27
    wp2shell
    Tool to check if your WordPress site is vulnerable to a pre-auth RCE bug.
    Perf 98
    Acce 95
    Sec 25
    Priv 25
    Rel 92
    Std 92
    Disc 62
    wp2shell.com · measured 2026-11-05
    7/7 frames
  28. 28
    BreachProbe
    BreachProbe scans a web app URL to find database leaks and security issues.
    Perf 71
    Acce 98
    Sec 25
    Priv 25
    Rel 75
    Std 92
    Disc 100
    breachprobe.thecompound.tech · measured 2026-11-09
    7/7 frames
  29. 29
    ShipOrNah
    Scan your Lovable, Bolt, Cursor, or v0 app for exposed API keys, missing Supabase RLS, and unprotected routes.
    Perf 97
    Acce 95
    Sec 45
    Priv 25
    Rel 92
    Std 92
    Disc 35
    shipornah.com · measured 2026-11-01
    7/7 frames
  30. 30
    Passive Security Scanner
    Passive, non-intrusive security scanner for websites covering headers, TLS, and exposed APIs.
    Perf 100
    Acce 96
    Sec 25
    Priv 25
    Rel 47
    Std 82
    Disc 15
    fixshield-deliveryzip--wtnjryh271.replit.app · measured 2026-11-03
    7/7 frames
What this does not say
This ranks how production-ready each product's public surface is — not how well it does its job. For website vulnerability scanner, that means it does not measure the quality of the work itself. Products whose sites block automated readers are left out rather than ranked last — we did not measure them, and bottom placement would claim something we never observed. Scores are floors: anything set at a CDN, a proxy or behind a login is invisible from the public surface.

All measured categories → · Browse the directory →