Network vulnerability scanner
Know every door into your servers before attackers do.
PortWarden scans your public IPs and domains like an attacker would: open ports, the exact software and version behind each one, and every known CVE that affects it. Vulnerabilities on the CISA list of actively exploited bugs go straight to the top.
The demo can scan scanme.nmap.org, a host the Nmap project keeps for exactly this.
What PortWarden checks
Port discovery
Top 200 TCP ports in a quick scan, top 1000 in a deep scan, with service and version fingerprinting (nmap engine).
CVE matching
Every detected product and version is matched against the NIST National Vulnerability Database (250,000+ CVEs) with CVSS scores.
Actively exploited
Cross-checked daily with the CISA Known Exploited Vulnerabilities catalogue, including ransomware use.
Dangerous exposure
30 rules for things that should never face the internet: Redis, MongoDB, Docker API, RDP, SMB, Elasticsearch, Kubelet and more.
Weak crypto
Old SSH algorithms, expired or expiring TLS certificates, anonymous FTP.
Change tracking
Weekly or daily rescans with a "new since last scan / fixed since last scan" diff.
OpenVAS and Nessus need a server, a feed sync and a security engineer. PortWarden runs in your browser in two minutes.
Three steps
- Add your domain or IP and prove you own it with one DNS TXT record or a file.
- Scan. Results in 30 seconds to 5 minutes, graded A to F with a plain-English fix for every finding.
- Schedule daily or weekly rescans and share a read-only report link with your developer or auditor.
Pricing
Business
490 kr/month
- 25 assets, daily scheduled scans
- Deep scans and leaked-file probing
- Unlimited PatchPilot agents
- "New since last scan" alerts
Partner
1.990 kr/month
- Unlimited assets for your clients
- White-label PDF reports
- API access
- Help fixing findings from fullstackpartner.com
Planned prices. Payments are not switched on yet, so everything is free while we are in beta.
Our scanning rules
Port scans and deep website scans only run against assets you have proved you control, with a DNS TXT record or a file on the server. Every scan identifies itself as FSP-Security-Scanner, comes from one published IP, never tries to log in or exploit anything, and refuses private and internal addresses. Quick SiteSentry scans only read what any browser can see.