Tools

Website Scanner
Network Scanner
Subdomain Finder
Port Scanner
URL Fuzzer
Sniper: Auto-Exploiter

Web recon

Google Hacking
Website Recon
URL Fuzzer
People Hunter

Network & Cloud recon

Domain Finder
Subdomain Finder
Find Virtual Hosts
Port Scanner

Web

Website Scanner
API Scanner
WordPress Scanner
Drupal Scanner

Network & Cloud

Network Scanner
Password Auditor
Cloud Scanner

Sniper: Auto-Exploiter
SQLi Exploiter
XSS Exploiter
HTTP Request Logger

Explore all 19 tools

Try light version for free

FeaturesFeatures

new AI Pentests

new AI Pentests

Attack surface mapping
Authenticated scanning
Internal network scanning
Vulnerability monitoring
Wordlists

newHow we use AI
MCP Server
Accuracy - our precision engine
Machine Learning classifier
newHow we minimize FPs

MCP Server
REST API access
Integrations
Scan Robots

Workspaces
Scan management
Findings management
Integrations
Collaboration

Pentest reporting
Vulnerability assessment reporting
Branded reports & emails

Explore all features

Pentest-Tools.com at a glance

See how we deliver high detection coverage and accuracy, with proof to defend every exploitable finding.

Explore the product

For

Security teams
IT teams
MSSPs
Partners

Case studies

Use cases

Penetration testing

Vulnerability assessment

Compliance evidence

Accuracy

Pricing

Services

Managed web app pentest
Red teaming
Adversarial testing for AI apps
Compliance penetration testing
Managed network pentest

Get an estimate See all offensive security services

Company

About
Our story
Team
Careers
Trust
Customers
Reviews
Contact

Resources

Docs & updates

Offsec learning

Book a demo Log in Start free trial

Spring4Shell

Spring4Shell (CVE-2022-22965) is the critical RCE vulnerability in Spring Core. Find out how to detect and exploit it.

No articles yet.

Discover our ethical hacking toolkit and all the free tools you can use!

Explore the product

Footer

LinkedIn
YouTube
Reddit
Mastodon
Twitter

One of EMEA's fastest-growing tech companies

Recognized by Deloitte in their Fast 500 EMEA 2023 for sustained financial growth and impact.

Independently audited company-wide ISMS

Documented controls, risk assessments, and continuous improvements secure your confidential results.

50,000+ security folks are here. Are you?

Join us on LinkedIn and subscribe on YouTube for practical offensive security tips, product demos, PoCs, and technical insights from our team.

Security leaders trust what they can prove

See why they choose accurate results, time-saving automation, and clear reporting on Gartner Peer Reviews and G2.