PenScope

Browser extension that passively maps a website's attack surface for bug bounty hunting.

Browser extensionfreeglobal

PenScope is a free Chrome extension for bug bounty hunters that passively maps a website's attack surface — endpoints, exposed secrets, misconfigured headers — without sending requests, then can run a configurable set of active probe checks and draft report text for authorized security testing engagements. It's built for security researchers who want an in-browser alternative to a manual proxy-based testing workflow.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of PenScope - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim PenScope to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether PenScope (or something else) actually fits.

Try a problem