The vulnerability scanner your AI agent can actually use.
Scannd exposes vulnerability scanning as MCP tools (scan, status, report, templates) so AI coding agents can test and triage your app without a human babysitting a dashboard. 12,000+ security checks available at the deepest scan depth, measured 25 July 2026. Wired for MCP. Ready in one API key.
Either yourdomain.com or https://yourdomain.com works.
agent@claude:~$ mcp call scannd:start-scan { "url": "https://myapp.dev" }
[MCP] Request authorized. Scan ID: sc_78291a
[SCAN] Running security template engine against target...
CRITICAL: SQL Injection vulnerability detected on /api/v1/auth
WARNING: Missing Security Headers (HSTS, CSP)
SUCCESS: professional scan depth applied
Agent summary: "Found 1 critical vulnerability. Recommend patching auth.ts line 42."
Platform Features
Comprehensive security auditing without the complexity.
12,000+ Security Checks Available
Template-based scanning covering CVEs, misconfigurations, and common web vulnerabilities, updated continuously as new threats are published. Checks available by plan, measured 25 July 2026: 2,500+ on Free, 10,000+ on Solo, 12,000+ on Startup and Agency.
Rotating Proxies
Scans route through a rotating proxy network so your site doesn't get blocked and results stay accurate.
Smart Reports
Get structured reports your AI can parse. Critical findings are flagged immediately for remediation.
Dashboard History
Every scan result is stored securely. Track your security posture over time with historical trends.
Scheduled Scans
Set it and forget it. Weekly automated scans run without manual intervention to ensure persistent safety.
MCP Integration
Connect directly to Claude or Cursor. Trigger scans and query results within your AI chat workflow.
Use scannd in Claude, Cursor, and any MCP-compatible AI
scannd now offers an MCP server for subscribers. Connect your API key to your AI assistant and trigger scans, query vulnerabilities, and get domain summaries directly from your AI workflow, no browser required.
{
"mcpServers": {
"scannd": {
"command": "npx",
"args": ["@scannd/mcp"],
"env": {
"SCANND_API_KEY": "sk_your_key_here"
}
}
}
}Seven tools your assistant can call
trigger_scan
Queues a security scan for your registered domain and returns a scan_id to poll.
get_scan_status
Polls the status of a previously triggered scan.
list_reports
Lists past scan reports for your account (metadata only, no findings).
get_report
Returns the full content of a specific report, or the latest report if omitted.
get_vulnerabilities
Returns findings from a report, optionally filtered by severity.
get_domain_summary
Returns a high-level summary of your domain: tier, scan history, and vulnerability counts.
list_templates
Lists the scan workflows available to trigger_scan.
Full tool reference with input/output schemas in the MCP docs.
Why not just use X?
Built specifically for the new era of AI-driven development.
Built for securing AI-written code, not for the agent to operate the scanner itself.
Enterprise API-security platform with MCP as an add-on, not built for a solo developer.
Dashboard-first, no agent-native workflow (Detectify / Intruder).
Transparent Pricing
60-day money back guarantee.
Free
Free on any billing period
Perfect for trying out basic MCP tools.
Start Free- 1 Target
- 2 Scans / Month
- 2 target changes / month
- 2,500+ security checks available
- MCP tools enabled (rate-limited)
Solo
Enhanced security for power developers.
- Full MCP access
- 3 Targets
- 6 target changes / month
- Unlimited Scans
- 10,000+ security checks available (CVE database + active web-vuln classes)
- Priority Support
Startup
Built for teams scaling agent workflows.
- Everything in Solo
- 10 Targets
- 20 target changes / month
- Deepest scan depth — 12,000+ security checks available (adds RCE / intrusive checks)
- Priority Support
- Team seat management Coming soon
- Scoped & audit-logged MCP keys Coming soon
- Project-based keys Coming soon
Agency
For consultancies rotating through client engagements.
- Unlimited target swaps
- Everything in Startup
- 30 Targets
- Deepest scan depth — 12,000+ security checks available
- Priority Support
- White-label reports Coming soon
- Multi-tenant client workspaces Coming soon
Agency is the only plan with unlimited target swaps — rotate clients in and out as often as an engagement needs, with no monthly change ceiling.
Check counts are the security templates available at each plan's scan depth, measured 25 July 2026 and rounded down. The library refreshes daily from its upstream release, so exact totals drift — see Scan Tiers & Depth for what each depth runs.
Partner
Custom pricing and a 100-target pool. Dedicated MCP endpoint, SSO and advanced governance are Coming soon — talk to us about the roadmap.