Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Pentest-Tools Website Scanner review

Freemium#15 of 29 in Web Application Security Scanners

Proof-based web and API scanning with authenticated testing, scheduling, and compliance reporting.

8.0/10Editor score
Pentest-Tools Website Scanner8.0 Visit Pentest-Tools

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Pentest-Tools Website Scanner is a cloud-based web application security scanner for security professionals and application security teams. It supports unauthenticated and authenticated testing, browser-based crawling for single-page applications and JavaScript-heavy websites, and detection of issues including SQL injection, XSS, command injection, and XXE. Its reports include remediation guidance, OWASP and CWE classifications, screenshots, and HTTP evidence, making it a fit for teams that need documented findings rather than scan results alone.

Pricing is structured across three monthly plans. NetSec costs $95 per month and combines network vulnerability assessment, cloud scanning, password auditing, and limited web and API scanning. WebNetSec costs $140 per month and adds DAST scanning, authenticated web scans, REST and GraphQL API scanning, and website vulnerability scanning; the listed entry capacity is five assets. Pentest Suite costs $190 per month and includes everything in WebNetSec, plus automatic CVE exploitation, SQL injection and XSS exploiters, and pentest report generation. A Free Edition with limited functionality and a separate 7-day trial provide lower-commitment entry points.

The strongest fit is for teams that value validation and repeatable workflows. Scheduled recurring scans, email alerts, REST API scan triggering, customizable reporting, compliance-oriented workflows, and integrations with Jira, Slack, Microsoft Teams, GitHub Actions, Vanta, and webhooks support security operations and development processes. The platform is available through the web and API, with light CLI scans on Linux, macOS, and Windows. Teams seeking broader network assessment can consider NetSec, while those needing exploiters and full pentest report generation should choose Pentest Suite; teams needing only occasional, limited checks may prefer the Free Edition.

Pentest-Tools Website Scanner pros and cons

  • Where it wins
    • Authenticated scanning for JavaScript-heavy web applications
    • Screenshots and HTTP evidence support proof-based findings
    • Scheduled scans, API triggers, integrations, and compliance reports
  • Where it doesn't
    • Free Edition has limited functionality
    • WebNetSec starts with capacity for five assets
    • Pentest Suite features cost $190 per month

Pentest-Tools Website Scanner fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update