Is this legal? Do I need permission?

AttackVector performs passive security scanning only — we analyze publicly available information like HTTP headers, SSL certificates, and technology fingerprints. We do NOT perform active exploitation. However, you should only scan websites you own or have explicit authorization to test.

How does AttackVector compare to traditional pentesting?

Traditional penetration tests cost $5,000–$50,000+ and take weeks. AttackVector provides instant AI-powered scanning starting at $79/mo. While it doesn't replace a full manual pentest for compliance purposes, it catches 80% of common vulnerabilities at 1% of the cost.

What does the free tier include?

The free scan includes SSL/TLS certificate analysis, HTTP security headers audit, technology stack detection, your top 3 vulnerabilities, and an overall security grade (A-F). Upgrade to Pro to unlock all vulnerabilities, CVE matching, and AI remediation guides.

How do the AI agents work?

AttackVector uses a pipeline of specialized AI agents: Recon Agent discovers endpoints, Fingerprint Agent detects your tech stack, Scanner Agent checks for misconfigurations, CVE Matcher cross-references the NVD database, and Report Writer generates human-readable findings with fix instructions.

How often should I scan my site?

We recommend scanning after every deployment and at least weekly. Pro subscribers get continuous monitoring with weekly automatic re-scans. New CVEs are published daily, so regular scanning is essential.

Can AttackVector scan internal/private networks?

No. For security reasons, AttackVector only scans publicly accessible URLs. We block requests to private IP ranges (localhost, 10.x.x.x, 192.168.x.x, etc.).

What is automated penetration testing?

Automated penetration testing uses AI and software tools to simulate cyberattacks on your systems, identifying vulnerabilities without requiring a human security consultant. AttackVector automates recon, fingerprinting, vulnerability scanning, CVE matching, and report generation — delivering results in seconds instead of weeks.

How much does a penetration test cost?

Traditional manual penetration tests cost between $5,000 and $50,000+ per engagement. AttackVector provides AI-powered pentesting starting with a free tier, with Pro plans at $79/mo and Premium at $199/mo — making enterprise-grade security accessible to startups and small businesses.

What vulnerabilities does AttackVector detect?

AttackVector detects OWASP Top 10 vulnerabilities including SQL injection, cross-site scripting (XSS), CSRF, broken authentication, security misconfigurations, sensitive data exposure, and more. Pro and Premium plans add CVE matching against the National Vulnerability Database, DNS security auditing, API security testing, and frontend pentesting.

Is AI pentesting as good as manual penetration testing?

AI pentesting catches 80% of common vulnerabilities instantly and is ideal for continuous monitoring. Manual pentesting is still recommended for compliance audits (PCI DSS, SOC 2) and testing complex business logic. AttackVector is best used as a complement — providing continuous coverage between annual manual pentests.

What is a CVE and how does CVE scanning work?

CVE (Common Vulnerabilities and Exposures) is a standardized system for identifying known security vulnerabilities. AttackVector detects your technology stack (frameworks, libraries, servers) and cross-references them against the National Vulnerability Database (NVD) with 50,000+ CVE entries to find known exploits affecting your software versions.

How do I check if my website is secure?

Enter your website URL at attackvector.tech/scan to get a free instant security assessment. You'll receive a security grade (A-F), SSL/TLS analysis, HTTP security headers audit, technology detection, and your top vulnerabilities — all in seconds with no signup required.

What is OWASP Top 10 and why does it matter?

The OWASP Top 10 is the industry standard list of the most critical web application security risks, published by the Open Worldwide Application Security Project. It includes injection attacks, broken authentication, sensitive data exposure, XML external entities, broken access control, security misconfigurations, XSS, insecure deserialization, using components with known vulnerabilities, and insufficient logging. AttackVector scans for all 10 categories.

Does AttackVector test APIs for vulnerabilities?

Yes. Pro and Premium plans include API discovery and API security testing. AttackVector automatically discovers API endpoints, then tests for SQL injection, command injection, authentication bypass, IDOR, rate limiting issues, CORS misconfigurations, and mass assignment vulnerabilities in your APIs.

What is a DNS security audit?

A DNS security audit examines your domain's DNS configuration for security issues including missing SPF, DKIM, and DMARC records (email spoofing protection), DNSSEC validation, zone transfer vulnerabilities, dangling DNS records, and subdomain takeover risks. AttackVector includes comprehensive DNS auditing in Pro and Premium plans.

How does AI-powered vulnerability scanning work?

AttackVector deploys multiple specialized AI agents in parallel: a Recon Agent maps your attack surface, a Fingerprint Agent identifies your technology stack, a Scanner Agent tests for misconfigurations and vulnerabilities, a CVE Matcher finds known exploits in your software, and a Report Agent generates human-readable findings with step-by-step remediation guides.

What are Security Headers? | AttackVector Glossary

Explain Like I'm 5

Think of your website as a house. Security headers are like different locks and rules you put on the doors and windows to keep unwanted guests out. Each type of security header acts like a specific lock or rule. For example, X-Content-Type-Options is like a doormat that only lets in the right kind of shoes, preventing anything suspicious from sneaking in. X-Frame-Options is like special blinds that stop people from peeking into your house through the windows.

Now, imagine Strict-Transport-Security (HSTS) as a rule that says only trusted people can use the front door securely. Referrer-Policy works like a privacy curtain that controls how much of your house's layout gets shared when someone leaves. Permissions-Policy is like a sign at the gate listing what's allowed inside, such as whether your guests can use their cameras or drones.

This matters because, just like you wouldn't want strangers wandering into your house or taking pictures without permission, you don't want hackers exploiting your website. Security headers help ensure your website is as safe as your home would be with all the right locks and rules in place.

Technical Definition

Definition

Security headers are HTTP response headers that provide an additional layer of security by instructing the browser on how to behave when interacting with a website. They help protect against common web threats like cross-site scripting (XSS), clickjacking, and data sniffing.

How It Works

X-Content-Type-Options: Prevents MIME type sniffing by enforcing the declared content type.
X-Frame-Options: Stops the page from being framed, protecting against clickjacking.
Strict-Transport-Security (HSTS): Forces browsers to use HTTPS, preventing man-in-the-middle attacks.
Referrer-Policy: Controls the amount of referrer information sent when navigating from the website.
Permissions-Policy: Manages the use of browser features like geolocation, camera, and microphone.
X-XSS-Protection: (Deprecated) Was used to enable the browser's built-in XSS protection.
Content-Security-Policy (CSP): Restricts resources the browser can load, mitigating XSS and data injection attacks.

Key Characteristics

Enforced by Browsers: Security headers are directives communicated from server to client and enforced by the browser.
Variety of Protections: They cover different aspects of security, from content type validation to resource loading restrictions.
Configurable: Headers can be tailored to suit the specific security needs of the application.

Comparison

Header	Purpose	Current Status
X-Content-Type-Options	Prevents MIME type sniffing	Active
X-Frame-Options	Defends against clickjacking	Active
HSTS	Enforces HTTPS	Active
Referrer-Policy	Controls referrer information	Active
Permissions-Policy	Manages browser feature permissions	Active
X-XSS-Protection	Legacy XSS protection	Deprecated
CSP	Mitigates XSS and data injection	Active

Real-World Example

The CVE-2019-11043 vulnerability in PHP-FPM was mitigated using CSP and HSTS headers to prevent exploitation by ensuring secure resource loading and forcing HTTPS.

Detection & Prevention

Test using httpx or browser DevTools to verify active headers.
Use OWASP ZAP or Burp Suite for comprehensive security header analysis.
Regularly review and update headers according to security best practices.

Common Misconceptions

Security Headers Replace Firewalls: They complement, not replace, other security measures.
HSTS is Optional: Lack of HSTS can lead to vulnerabilities in HTTPS implementation.
CORS and Security Headers are the Same: CORS handles resource sharing, not threats directly.

Related Terms

What is Clickjacking?

Keywords

what are Security HeadersSecurity Headers explainedSecurity Headers detectionHTTP securityweb security headersCSPHSTSX-Frame-Options

Ready to scan your site?

AttackVector uses AI agents to find vulnerabilities before attackers do. Start a free scan now.

Start Free Scan