Scanwise
A passive website security scanner: DNS/SPF/DMARC, TLS, security headers, exposed secrets and config files, CORS/GraphQL checks, CVE lookup — with AI-generated remediation patches for what it finds. Free scans and paid AI reports are live — crypto-only, one-time credit packs that never expire (first scan free).
🛡️ Scanwise — Passive Security Scanning + AI Fixes
🚀 About the Project
Scanwise runs a ~20-module passive recon pipeline against a domain — WHOIS, DNS, TLS, security headers, tech fingerprinting, subdomain enumeration, exposed secrets/config files, CORS/GraphQL checks, CVE lookup — and turns the raw output into severity-rated findings with an AI advisor for remediation.
🔍 What It Checks
DNS/SPF/DMARC, WHOIS and IP intel, TLS configuration
Security headers, CORS and GraphQL misconfigurations
Exposed secrets, .env/.git files, and other config leaks
Subdomain enumeration, port scanning, breach/threat intel
Tech fingerprinting and known CVEs for detected stack components
🎯 How It's Different
Fully passive and non-intrusive — built for authorized attack-surface monitoring, not active exploitation or pentesting. And it doesn't stop at a list of problems: an AI advisor turns each finding into a concrete remediation patch, so the report is something to act on, not just read.
📈 Tech Stack
Node.js + TypeScript backend (Express, MongoDB), Next.js frontend, GPT-4o for the remediation advisor and findings write-ups.
💳 Status
Live. Your first scan is free; paid scans run on one-time credit packs — $4.99 for a single scan, $12.99 for 5, Pro $49 for 25 credits, Agency $99 for 60. Payments are crypto-only via OxaPay, and credits never expire.
🔗 Visit
scanwise.dev