HackerMe

HackerMe

Agura
TopScan

TopScan

4.8 out of 5 stars
+
+

Related Products

  • Rocket z/Assure VAP
    5.0 out of 5 stars 1 Rating
    Visit Website for Rocket z/Assure VAP
  • Criminal IP ASM
    4.9 out of 5 stars 21 Ratings
    Visit Website for Criminal IP ASM
  • Aikido Security
    4.6 out of 5 stars 367 Ratings
    Visit Website for Aikido Security
  • Astra Pentest
    4.6 out of 5 stars 296 Ratings
    Visit Website for Astra Pentest
  • Criminal IP
    4.6 out of 5 stars 459 Ratings
    Visit Website for Criminal IP
  • BranditScan
    4.4 out of 5 stars 72 Ratings
    Visit Website for BranditScan
  • Bluehost
    4.5 out of 5 stars 32,205 Ratings
    Visit Website for Bluehost
  • Gearset
    4.7 out of 5 stars 305 Ratings
    Visit Website for Gearset
  • ShareMyToolbox
    4.8 out of 5 stars 41 Ratings
    Visit Website for ShareMyToolbox
  • PostScan Mail
    4.0 out of 5 stars 137 Ratings
    Visit Website for PostScan Mail

About

HackerMe is a cloud service for automated external security scanning and monitoring of websites, domains and other internet-facing assets. Business owners and security teams can scan assets they own or have explicit permission to test. Its engines assess exposed services, security configurations, known vulnerabilities, web-application flaws, and risks affecting externally accessible systems and APIs. Scans run on demand or on a schedule; findings include supporting evidence, explanations, reports and remediation recommendations. AI-assisted testing supports deeper checks of complex applications. The free plan covers one domain with automatic daily scans and no payment card. Paid plans add scan engines, domains or subdomains, and scheduling options. HackerMe provides assessments and recommendations; it does not replace a scoped manual penetration test or implement customer fixes.

About

TopScan is a continuous external security scanning and vulnerability management platform for engineering teams without a dedicated security function. Add IP addresses, domains, or CIDR ranges and start your first scan within minutes, running network, port, and web application scans on proven open-source engines such as OWASP ZAP and Nuclei. Every plan also includes SAST: PR checks, all languages, custom rules, and dependency scanning. Findings are grouped by severity and tracked with a status, an SLA, and a single Security Score (0–100), so remediation becomes routine instead of a one-off report. Higher tiers add AWS auto-discovery, SAST auto-fix and PR review, and Slack/Jira/YouTrack routing. Pricing is license-based, not per user, with unlimited users on every plan, starting at $129/month, with a 14-day free trial and no credit card required.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Website owners and organizations seeking authorized external website security scanning.

Audience

CTOs, Heads of DevOps, and Senior DevOps Engineers at software-driven companies without a dedicated security team - startups, SaaS, product studios, dev shops, and fintechs.

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

No images available

Screenshots and Videos

No images available

Pricing

$19.90/month
The free plan covers one domain with automatic daily scans and requires no payment card. Pro is $19.90 per month, billed annually at $238.80. Pro and Ultra plans add scan engines, domain and subdomain coverage, and scheduling options.
Free Version Supported
Free Trial Not Supported

Pricing

$129/month
Free Version Not Supported
Free Trial Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 4.8 / 5
ease 4.4 / 5
features 4.6 / 5
design 5.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • We use both halves. Pull requests on our repos get a security check, dependencies included, and our public apps and servers get scanned every week. Developers see code issues where they already work, and I get the external picture without a second vendor.
  • You can mark a finding as noise, or snooze it with a reason and an end date, and the history stays attached. Our open list only shows real work, and when someone asks why an issue was parked, the answer is right there with a name next to it.
  • Connecting our AWS account brought in our instances and DNS zones in one go, with the tags we already had. That saved us adding everything by hand, and we could start scanning by environment right away.
  • When a fixed issue reappears, after a rollback or an old image getting redeployed, it shows up as a regression instead of a fresh finding. That tells us our process slipped somewhere, so we fix the cause and not only the symptom.
  • I'm an IT manager, not a security person, and I didn't need to become one to use this. I added our domains and public IPs and had the first results the same day. Each finding tells you in plain English what to do next.

Cons

  • Connecting the repositories took a couple of attempts because of org permissions on our side. Not really the tool's fault, though a clearer note in the docs would have saved time.
  • I'd like to assign findings to specific people inside the tool. For now ownership lives in our own tickets.
  • It looks at exposure and vulnerabilities, not cloud configuration. For IAM policies and bucket settings we still use AWS's own tools.
  • I'd like a longer-term view of how open issues trend over several months. For quarterly reviews I still put that together myself.
  • It took me a while to figure out how to group assets so that filters and schedules made sense. Once tags clicked it was fine, it just isn't obvious on day one.

Training

Documentation Not Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Agura
Founded: 2018
Israel
hackerme.ai/

Company Information

TopScan
Founded: 2024
United Arab Emirates
topscan.me/

Alternatives

Alternatives

Aikido Security

Aikido Security

4.6 out of 5 stars
PT Application Inspector

PT Application Inspector

Positive Technologies
PatrOwl

PatrOwl

PatrOwl.io
Kiuwan Code Security

Kiuwan Code Security

Kiuwan
4.5 out of 5 stars
FortWatch

FortWatch

WebWork AI
Invicti Web + API

Invicti Web + API

Invicti Security
4.0 out of 5 stars

Categories

Categories

Integrations

Git Supported
Slack Supported

Integrations

Git Not Supported
Slack Not Supported
Claim HackerMe and update features and information
Claim HackerMe and update features and information
Claim TopScan and update features and information
Claim TopScan and update features and information