wscan

Web security scanner for active, passive, and AI-driven penetration testing across the OWASP vulnerability landscape.

Webfree

wscan is an open-source web security scanner supporting active, passive, and AI-driven penetration testing, covering the OWASP vulnerability landscape with a plugin engine that runs Nuclei, Xray, and Goby proof-of-concept checks. It offers a browser-based WebUI, a reverse-connect platform for confirming blind vulnerabilities, and an AI agent mode, aimed at security teams running authorized penetration tests.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of wscan - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim wscan to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether wscan (or something else) actually fits.

Try a problem