Skip to content
SPECIFICTION
Get listed

ScanTitan

scantitan.com

From $9.92/mo Free plan WebAPI
Visit scantitan.com
Spec score 8.5 #6 of 23 in Network Vulnerability Scanners

What it is

ScanTitan is a cloud-based vulnerability scanning and attack-surface platform with malware detection and removal. Its network scanner discovers live hosts, identifies services on open ports, and checks software versions against a database of more than 100,000 CVEs. Coverage includes known vulnerabilities, misconfigurations, weak or default credentials, network devices, SSL/TLS, and end-of-life services. Confirmed findings come with reproducible request-and-response evidence and CVSS and EPSS prioritization. Reports can be exported as PDF, JSON, or HTML, and compliance exports map to PCI DSS 11.3, ISO 27001, SOC 2, and HIPAA. Integrations include Slack alerts, Jira tickets, AWS, Azure and GCP coverage, SIEM export, REST API, and JSON webhooks. ScanTitan says it scans only customer-specified external-facing assets, not internal infrastructure or employee devices. A free plan has no credit card requirement or trial expiry; Professional costs $119 a year, billed yearly. It is available via web and API, and lists Windows Server as a supported operating system.

Spec sheet

What it does
ScanTitan combines website vulnerability scanning, malware detection and removal, and external attack-surface management in one cloud platform.Read 15 Oct 2026 · scantitan.com
Product
ScanTitan describes a cloud-based vulnerability scanning and attack-surface platform that also offers malware detection and removal.Read 3 Oct 2026 · scantitan.com
Intended users
The company identifies SMBs, mid-market SaaS firms, e-commerce businesses, digital agencies, and compliance-driven industries as intended customers.Read 3 Oct 2026 · scantitan.com
Integrations
The network scanner lists Slack alerts, Jira ticket creation, AWS, Azure and GCP cloud coverage, SIEM export, REST API, and JSON webhooks.Read 3 Oct 2026 · scantitan.com
Security
ScanTitan says it is SOC 2 Type II attested, ISO 27001 certified, and operates under GDPR; reports and certificates are available on request.Read 3 Oct 2026 · scantitan.com
Support
The pricing page says every package includes 24/7 email support, while Enterprise offers dedicated support and an SLA.Read 3 Oct 2026 · scantitan.com
Headquarters
The Hague, NetherlandsRead 28 Sep 2026 · scantitan.com
Founded
LinkedIn and ScanTitan's about page both state that the company was founded in 2014.Read 15 Oct 2026 · ca.linkedin.com
API access
The pricing page lists API access for Business, Consultant, and Enterprise plans.Read 3 Oct 2026 · scantitan.com
API scanning
The API scanner imports OpenAPI, Swagger or Postman definitions and tests REST, GraphQL, SOAP and gRPC endpoints against the OWASP API Top 10.Read 15 Oct 2026 · scantitan.com
Attack-surface management
EASM discovers subdomains, shadow IT, open ports, certificates and cloud assets, then continuously reassesses changes and new critical CVEs.Read 15 Oct 2026 · scantitan.com
Cloud integrations
The attack-surface page lists AWS, Azure, GCP, Cloudflare, Slack, Jira, Vanta, Splunk and webhooks.Read 15 Oct 2026 · scantitan.com
Company focus
LinkedIn describes ScanTitan as a cyber-exposure assessment and threat-intelligence solution for discovering and monitoring vulnerabilities on exposed systems.Read 15 Oct 2026 · ca.linkedin.com
Company headquarters
LinkedIn lists headquarters in Papendrecht, South Holland, while ScanTitan's about page gives Den Haag, Netherlands as its headquarters and Dubai as a branch office.Read 15 Oct 2026 · ca.linkedin.com
Company size
LinkedIn lists ScanTitan as a privately held IT services company with 2–10 employees.Read 15 Oct 2026 · ca.linkedin.com
Confirmed findings
The network scanner says confirmed findings include reproducible request-and-response evidence and prioritization using CVSS and EPSS.Read 3 Oct 2026 · scantitan.com
Coverage
The network scanner describes checks for known CVEs, misconfigurations, weak or default credentials, network devices, SSL/TLS, and end-of-life services.Read 3 Oct 2026 · scantitan.com
Credential handling
Credentials for authenticated scanning are described as encrypted in transit and used only during the active scan session, without retention afterward.Read 15 Oct 2026 · scantitan.com
Credentialed scanning
Authenticated network scans check patches, configuration, and CIS/NIST benchmark gaps using supplied credentials.Read 15 Oct 2026 · scantitan.com
Data handling
The company says scan findings remain in the customer account during the active plan, can be deleted on request, and are not sold or shared with third parties.Read 3 Oct 2026 · scantitan.com
Data residency
The security page says scan findings are stored on EU servers, encrypted at rest with AES-256 and transmitted with TLS 1.2 or higher.Read 15 Oct 2026 · scantitan.com
Data retention
Findings remain during an active plan, are retained for 30 days after cancellation for export, and can be deleted on request under GDPR Article 17.Read 15 Oct 2026 · scantitan.com
Developer integrations
Documented integrations include GitHub Actions, GitLab, Postman, Jira, Slack, Azure and JSON webhooks.Read 15 Oct 2026 · scantitan.com
Documentation depth
Public developer material consists mainly of curl examples, a GitHub Actions action, supported specification formats and integration descriptions rather than a separate documentation portal.Read 15 Oct 2026 · scantitan.com
Free access
The pricing page describes a free plan with no credit card and no trial expiry, and the contact page also offers a free domain scan without an account.Read 3 Oct 2026 · scantitan.com
Limit: Capterra listing
Capterra states that no free trial and no free version are included and that pricing is contact-vendor, which differs from ScanTitan's own free plan page.Read 15 Oct 2026 · capterra.com
Limit: internal scope
The about page says ScanTitan is not suitable for internal network scanning or endpoint protection, despite the network page describing an internal connector.Read 15 Oct 2026 · scantitan.com
Limit: one-site license
Two Entrepreneur reviewers complained that their deal license allowed only one website and one site at a time.Read 15 Oct 2026 · store.entrepreneur.com
Limit: review availability
GetApp shows zero user ratings and no pricing information for ScanTitan, so it provides no reviewer consensus.Read 15 Oct 2026 · getapp.com
Limits
The company says it scans only external-facing assets specified by the customer and does not scan internal infrastructure or employee devices.Read 3 Oct 2026 · scantitan.com
Malware service
ScanTitan detects PHP backdoors, card skimmers, obfuscated code and other malware, with analysts handling cleanup and blocklist removal.Read 15 Oct 2026 · scantitan.com
Network evidence
Network findings include request and response evidence intended to confirm exploitable issues and reduce false positives.Read 15 Oct 2026 · scantitan.com
Network scanning
The network scanner discovers hosts, enumerates ports and services, matches versions against more than 100,000 CVEs, and prioritizes results with CVSS and EPSS.Read 15 Oct 2026 · scantitan.com
Praise: core scanning
Entrepreneur purchasers said the product checks website security, sends notifications and works well for managing site security parameters.Read 15 Oct 2026 · store.entrepreneur.com
Public API
Official examples show REST endpoints at api.scantitan.com using bearer API keys for API scans and attack-surface discovery.Read 15 Oct 2026 · scantitan.com
Rating on Capterra
0.0 out of 5 from 0 reviewsRead 15 Oct 2026 · capterra.com
Rating on Entrepreneur
4.3 out of 5 from 4 reviewsRead 15 Oct 2026 · store.entrepreneur.com
Rating on GetApp
0.0 out of 5 from 0 reviewsRead 15 Oct 2026 · getapp.com
Reporting
Network scan reports can be exported as PDF, JSON, and HTML, and the page says compliance exports map to PCI DSS 11.3, ISO 27001, SOC 2, and HIPAA.Read 3 Oct 2026 · scantitan.com
Reports
Attack-surface reports can be exported in PDF, JSON and HTML and include asset inventory, prioritized exposure queues and compliance mappings.Read 15 Oct 2026 · scantitan.com
Security certification status
The security page lists SOC 2 Type II and ISO 27001 as in progress, while the about page separately claims SOC 2 Type II attestation and ISO 27001 certification.Read 15 Oct 2026 · scantitan.com
Self-hosting limit
ScanTitan presents itself as a cloud service and says buyers needing a self-managed open-source scanner should consider OpenVAS instead.Read 15 Oct 2026 · scantitan.com
System requirements
The lifetime-deal listing states that access requires any modern browser and is provided for desktop use.Read 15 Oct 2026 · store.entrepreneur.com
Website DAST
Website scanning performs authenticated dynamic tests for SQL injection, XSS, broken access control, and other OWASP Top 10 issues.Read 15 Oct 2026 · scantitan.com

Plans and prices

Free Free free forever Malware scanning · Basic exposure scanning · Basic malware monitoring · Basic uptime monitoring Read 15 Oct 2026 · scantitan.com
Professional $119 a year billed yearly Advanced vulnerability scanning · Advanced exposure scanning · Advanced malware monitoring · Uptime monitoring · Vulnerability monitoring · Exposure monitoring Read 15 Oct 2026 · scantitan.com
Business $155 a year billed yearly 360° vulnerability scanning · 360° exposure scanning · Network exposure monitoring · Brand monitoring · Vulnerability intelligence · Exploit intelligence · API access Read 15 Oct 2026 · scantitan.com
Consultant $486 a year per concurrent website Unlimited scans · Unlimited website add/delete · White-labeled PDF reports · API access · 360° scanning Read 15 Oct 2026 · scantitan.com
Enterprise Priced on request custom pricing Threat intelligence · Custom scan limits · SLA · Dedicated support · White-label reporting · API access Read 15 Oct 2026 · scantitan.com

Every ScanTitan plan and price →

Strong points and limits

Strong points

  • Checks versions against more than 100,000 CVEs.
  • Confirmed findings include reproducible evidence.
  • Reports export to PDF, JSON, and HTML.
  • Free plan has no credit card requirement.
  • Includes 24/7 email support on every package.

Limits

  • Does not scan internal infrastructure.
  • Does not scan employee devices.
  • Professional costs $119 a year, billed yearly.

Who it suits

ScanTitan is aimed at SMBs, mid-market SaaS firms, e-commerce businesses, digital agencies, and compliance-driven industries. It suits teams assessing external-facing assets rather than internal infrastructure or employee devices.

Verdict

ScanTitan pairs external vulnerability scanning with malware monitoring, integrations, and exportable reports. Its scope is explicitly limited to external-facing assets, and Professional is priced at $119 a year.

Where Specifiction places it

Alternatives to ScanTitanAll alternatives →