Tal Forsher
Senior full-stack engineer & security researcher

Quick scan

One request, no login, no data read. This shows what a public application reveals about itself before anyone asks it a question: what it is built on, how it is served, and whether it stands open or behind a gate.


How it runs

  • One request to the URL you give, nothing else. No crawling, no path guessing, no login attempt.
  • No page content is stored. A run is recorded as a salted hash, the hostname, and the band.
  • Five runs an hour per source, then it stops.
  • Local and private addresses are refused, so it cannot be pointed at internal systems.