Is this legal? Do I need permission?

AttackVector performs passive security scanning only — we analyze publicly available information like HTTP headers, SSL certificates, and technology fingerprints. We do NOT perform active exploitation. However, you should only scan websites you own or have explicit authorization to test.

How does AttackVector compare to traditional pentesting?

Traditional penetration tests cost $5,000–$50,000+ and take weeks. AttackVector provides instant AI-powered scanning starting at $79/mo. While it doesn't replace a full manual pentest for compliance purposes, it catches 80% of common vulnerabilities at 1% of the cost.

What does the free tier include?

The free scan includes SSL/TLS certificate analysis, HTTP security headers audit, technology stack detection, your top 3 vulnerabilities, and an overall security grade (A-F). Upgrade to Pro to unlock all vulnerabilities, CVE matching, and AI remediation guides.

How do the AI agents work?

AttackVector uses a pipeline of specialized AI agents: Recon Agent discovers endpoints, Fingerprint Agent detects your tech stack, Scanner Agent checks for misconfigurations, CVE Matcher cross-references the NVD database, and Report Writer generates human-readable findings with fix instructions.

How often should I scan my site?

We recommend scanning after every deployment and at least weekly. Pro subscribers get continuous monitoring with weekly automatic re-scans. New CVEs are published daily, so regular scanning is essential.

Can AttackVector scan internal/private networks?

No. For security reasons, AttackVector only scans publicly accessible URLs. We block requests to private IP ranges (localhost, 10.x.x.x, 192.168.x.x, etc.).

What is automated penetration testing?

Automated penetration testing uses AI and software tools to simulate cyberattacks on your systems, identifying vulnerabilities without requiring a human security consultant. AttackVector automates recon, fingerprinting, vulnerability scanning, CVE matching, and report generation — delivering results in seconds instead of weeks.

How much does a penetration test cost?

Traditional manual penetration tests cost between $5,000 and $50,000+ per engagement. AttackVector provides AI-powered pentesting starting with a free tier, with Pro plans at $79/mo and Premium at $199/mo — making enterprise-grade security accessible to startups and small businesses.

What vulnerabilities does AttackVector detect?

AttackVector detects OWASP Top 10 vulnerabilities including SQL injection, cross-site scripting (XSS), CSRF, broken authentication, security misconfigurations, sensitive data exposure, and more. Pro and Premium plans add CVE matching against the National Vulnerability Database, DNS security auditing, API security testing, and frontend pentesting.

Is AI pentesting as good as manual penetration testing?

AI pentesting catches 80% of common vulnerabilities instantly and is ideal for continuous monitoring. Manual pentesting is still recommended for compliance audits (PCI DSS, SOC 2) and testing complex business logic. AttackVector is best used as a complement — providing continuous coverage between annual manual pentests.

What is a CVE and how does CVE scanning work?

CVE (Common Vulnerabilities and Exposures) is a standardized system for identifying known security vulnerabilities. AttackVector detects your technology stack (frameworks, libraries, servers) and cross-references them against the National Vulnerability Database (NVD) with 50,000+ CVE entries to find known exploits affecting your software versions.

How do I check if my website is secure?

Enter your website URL at attackvector.tech/scan to get a free instant security assessment. You'll receive a security grade (A-F), SSL/TLS analysis, HTTP security headers audit, technology detection, and your top vulnerabilities — all in seconds with no signup required.

What is OWASP Top 10 and why does it matter?

The OWASP Top 10 is the industry standard list of the most critical web application security risks, published by the Open Worldwide Application Security Project. It includes injection attacks, broken authentication, sensitive data exposure, XML external entities, broken access control, security misconfigurations, XSS, insecure deserialization, using components with known vulnerabilities, and insufficient logging. AttackVector scans for all 10 categories.

Does AttackVector test APIs for vulnerabilities?

Yes. Pro and Premium plans include API discovery and API security testing. AttackVector automatically discovers API endpoints, then tests for SQL injection, command injection, authentication bypass, IDOR, rate limiting issues, CORS misconfigurations, and mass assignment vulnerabilities in your APIs.

What is a DNS security audit?

A DNS security audit examines your domain's DNS configuration for security issues including missing SPF, DKIM, and DMARC records (email spoofing protection), DNSSEC validation, zone transfer vulnerabilities, dangling DNS records, and subdomain takeover risks. AttackVector includes comprehensive DNS auditing in Pro and Premium plans.

How does AI-powered vulnerability scanning work?

AttackVector deploys multiple specialized AI agents in parallel: a Recon Agent maps your attack surface, a Fingerprint Agent identifies your technology stack, a Scanner Agent tests for misconfigurations and vulnerabilities, a CVE Matcher finds known exploits in your software, and a Report Agent generates human-readable findings with step-by-step remediation guides.

Terms of Service | AttackVector

1. Acceptance of Terms

By accessing and using AttackVector ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, you must not use the Service. We reserve the right to update these terms at any time, and continued use of the Service constitutes acceptance of any modifications.

2. Description of Service

AttackVector is an AI-powered penetration testing platform that provides:

Automated security scanning and vulnerability discovery
API endpoint discovery and penetration testing
DNS configuration auditing
CVE (Common Vulnerabilities and Exposures) exploitation testing
AI-generated remediation reports and compliance documentation
Continuous security monitoring and re-scanning

3. User Accounts

To use AttackVector, you must:

Be at least 18 years of age
Provide accurate and complete registration information
Maintain the confidentiality and security of your account credentials
Accept responsibility for all activities conducted under your account

You may not share your account or allow others to access it. You must notify us immediately of any unauthorized use of your account.

4. Authorized Use Only

CRITICAL — READ CAREFULLY

You MUST own or have explicit written authorization from the owner to scan any target system. Unauthorized scanning of systems you do not own or have permission to test may constitute a violation of computer fraud and abuse laws, including but not limited to the Computer Fraud and Abuse Act (CFAA), the EU Cybercrime Directive, and equivalent national legislation.

You agree to:

Only scan systems you own or have written authorization to test
Maintain documentation of authorization for all scanned targets
Comply with all applicable local, national, and international laws
Not use the Service for any illegal, malicious, or unauthorized purpose

AttackVector is not responsible for unauthorized or illegal use of the platform. Users bear full legal responsibility for their scanning activities.

5. Active Testing Disclaimer

AttackVector's active pentesting features — including API endpoint testing, frontend security testing, and CVE exploitation verification — interact directly with target systems. By using these features, you acknowledge and accept that:

Scans may trigger security alerts on Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS)
Web Application Firewalls (WAF) may block or rate-limit requests from our scanning infrastructure
Security monitoring tools may flag scanning activity as suspicious or malicious
Active testing may cause unexpected behavior on improperly configured target systems

You accept all risks associated with active security testing and agree to hold AttackVector harmless from any consequences arising from scans you initiate.

6. Payment Terms

AttackVector offers the following subscription plans:

Pro: $79/month — full vulnerability reports, CVE details, remediation guides, and weekly re-scans
Premium: $199/month — everything in Pro plus deep pentesting, API testing, compliance reports, and priority support

Payment terms:

All subscriptions are billed monthly via Stripe
You may cancel your subscription at any time
Refunds are handled on a case-by-case basis
We reserve the right to change pricing with 30 days notice
Failed payments may result in service suspension

7. AI-Generated Content

Important disclaimers about AI-generated content:

Scan reports and vulnerability assessments are generated by AI agents and may contain inaccuracies or false positives
All findings should be verified by qualified security professionals before taking action
AttackVector is not a substitute for professional penetration testing or security auditing
We do not guarantee the completeness or accuracy of any scan results
Remediation guidance is AI-generated and should be reviewed before implementation

8. Limitation of Liability

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED.

To the maximum extent permitted by law, AttackVector shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to:

Damages arising from reliance on scan results
Security incidents that occur despite scanning
False positives or false negatives in vulnerability reports
Disruption to target systems caused by active testing
Legal consequences from unauthorized scanning

Scan results are informational only and do not constitute a guarantee of security.

9. Intellectual Property

Your Content

You retain full ownership of your scan results, reports, and any data generated from scanning your targets. You may use, share, and distribute your scan reports as you see fit.

Our Content

The AttackVector platform, including all code, AI models, scanning tools, user interface, and documentation, is owned by AttackVector and protected by intellectual property laws. You may not reverse engineer, copy, or redistribute any part of the platform.

10. Termination

Either party may terminate the agreement at any time. We may suspend or terminate your account immediately for:

Violation of these Terms, especially unauthorized scanning
Abusive, fraudulent, or illegal activity
Non-payment of subscription fees
Attempts to abuse or circumvent platform limitations

You may cancel your subscription and delete your account at any time through your account settings.

11. Governing Law

These Terms are governed by and construed in accordance with the laws of the European Union and the applicable member state. Any disputes arising from these Terms or the use of the Service shall be subject to the exclusive jurisdiction of the competent courts within the European Union.

12. Contact

For questions about these Terms of Service, contact us at:

Email: legal@attackvector.tech

Website: https://attackvector.tech