Vultester - Server Vulnerability Scanner
AI-powered server vulnerability scanner with 50+ security rules across 6 categories. Features port scanning, SSL analysis, HTTP security headers, directory bruteforce, and expert system analysis.
Vultester - Server Vulnerability Scanner endpoints
| Method | Endpoint | Description |
|---|---|---|
| System | ||
| GET |
health /api/health |
Returns API health status, version, and configuration |
| Rules | ||
| GET |
getRules /api/v1/rules |
Retrieve all 50 security rules from the knowledge base |
| GET |
getRule /api/v1/rules/{rule_id} |
Get details of a specific security rule by ID |
| Scanning | ||
| POST |
scanAndAnalyze /api/v1/scan/analyze |
Combined port scan + expert system analysis in one request |
| POST |
heartbleedScan /api/v1/scan/heartbleed |
Check for OpenSSL Heartbleed vulnerability (CVE-2014-0160) |
| POST |
robotScan /api/v1/scan/robot |
Parse and analyze robots.txt for hidden paths |
| POST |
corsScan /api/v1/scan/cors |
Check Cross-Origin Resource Sharing configuration |
| POST |
fullScan /api/v1/scan |
Comprehensive scan including ports, SSL, HTTP, DNS, WHOIS, and subdomains |
| POST |
httpScan /api/v1/scan/http |
Analyze HTTP security headers, cookies, and technologies |
| POST |
portScan /api/v1/scan/ports |
Scan target ports for open services with banner detection |
| POST |
concurrentScan /api/v1/scan/concurrent |
Run multiple scan types concurrently for faster results |
| POST |
sslScan /api/v1/scan/ssl |
Check SSL certificate, TLS protocols, ciphers, and vulnerabilities |
| Brute Force | ||
| POST |
apiBruteforce /api/v1/bruteforce/api |
Discover hidden API endpoints |
| POST |
fullBruteforce /api/v1/bruteforce/full |
Run all brute force scans (directories, API, sensitive files) |
| POST |
sensitiveScan /api/v1/bruteforce/sensitive |
Scan for exposed sensitive files (.env, .git, credentials, etc.) |
| POST |
directoryBruteforce /api/v1/bruteforce/directories |
Discover hidden directories and files on web servers |
| POST |
httpMethodsTest /api/v1/bruteforce/http-methods |
Test which HTTP methods are allowed (GET, POST, PUT, DELETE, etc.) |
| Analysis | ||
| POST |
attackSurfaceAnalysis /api/v1/analyze/attack-surface |
Map the complete attack surface of a target |
| POST |
complianceAnalysis /api/v1/analyze/compliance |
Generate compliance report for GDPR, PCI-DSS, HIPAA |
| POST |
analyze /api/v1/analyze |
Run AI-powered vulnerability analysis on provided security facts |
| POST |
cvssAnalysis /api/v1/analyze/cvss |
Calculate CVSS 3.1 risk scores for vulnerabilities |
| POST |
remediationAnalysis /api/v1/analyze/remediation |
Get automated remediation code for detected vulnerabilities |
| POST |
dnssecAnalysis /api/v1/analyze/dnssec |
Check DNSSEC configuration for domain |
| POST |
emailSecurityAnalysis /api/v1/analyze/email-security |
Check SPF, DKIM, DMARC configuration for email security |
| POST |
javascriptAnalysis /api/v1/analyze/javascript |
Analyze JavaScript for security issues |
Vultester - Server Vulnerability Scanner pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | 10 / second |
|
| PRO Recommended | $9.99 / month | — |
|