Services

Two mindsets, six categories of scanner

Securing a website means answering two different questions. Nexera's toolkit is organised around both.

Known vulnerabilities

The gaps attackers already have a map for

Published CVEs, outdated components, weak configuration. These are fast to check and fast to exploit — so they're where we start. Covered by our infrastructure and CMS scanners.

Unknown vulnerabilities

The flaws unique to your site

Bugs in code you wrote or configured, that no database can warn you about. Finding these takes active testing that probes your actual application. Covered by our general-purpose, API, and specialised scanners.

Browse by category

The six scanner categories

Open any category to see the specific tools it includes and what each one reveals.

01 / 06 Unknown vulnerabilities

General-purpose web scanners

Full active scans that probe your own code for unknown weaknesses.

02 / 06 Known vulnerabilities

Infrastructure web scanners

Match your site against known published vulnerabilities and outdated software.

03 / 06 Attack surface

Fuzzers & brute forcers

Content discovery and input fuzzing that reveal your real attack surface.

04 / 06 Known vulnerabilities

CMS web scanners

Targeted scans for WordPress, Joomla, Drupal and other content platforms.

05 / 06 Unknown vulnerabilities

API web scanners

Security testing built for REST and GraphQL APIs.

06 / 06 Targeted confirmation

Specialised scanners

Deep single-vulnerability tools that go further than a broad scan.