You specify the target URL.
We'll start the riot.

>
 
Choose Your Riot
Free Riot $0
Leaked Credentials, Security Headers, and Public Identity Footprint sweep.
Mini Riot $35
Deep Public Surfaces Sweep.
DNS, source maps, build artifacts, open cloud backends & buckets, forgotten endpoints, guessable IDs, leaked URL tokens, weak cookies, CORS, unpinned scripts, clickjacking, and server fingerprints.
Mega RiotReq. TXT Auth $125
Active Vulnerability Audit.
All Mini Riot checks, plus active testing for exploitable flaws: CVE scanning, subdomain takeover risk, PII leakage, open redirects, rate limit gaps, cryptographic weaknesses, and workflow sequence abuse.
Riot Test Barrage
What We Inspect
Why It Matters
No accounts. Priced Per Run.

Choose Your Riot

Free and Mini stay on public-safe surfaces.
Mega Riot moves into deep active testing & requires DNS verification.

Privacy

How runs stay private

See Privacy Policy

Riots are run and built in a temporary container, then made exclusively available through a single URL that expires in 7 days.

No data is persisted about your run beyond internal performance metrics and a receipt of what domain was tested and when.

DNS Ownership via TXT Auth Required

Why do we require this for Mega Riot?

Mega Riot moves into active testing. That requires additional consent through proof of DNS control, so intrusive checks only run against validated properties.

Choose Your Riot
Free Riot $0
Leaked Credentials, Security Headers, and Public Identity Footprint sweep.
Mini Riot $35
DNS, source maps, build artifacts, open cloud backends & buckets, forgotten endpoints, guessable IDs, leaked URL tokens, weak cookies, CORS, unpinned scripts, clickjacking, and server fingerprints.
Mega Riot Requires TXT Auth $125
All Mini Riot checks, plus active testing for exploitable flaws: CVE scanning, subdomain takeover risk, PII leakage, open redirects, rate limit gaps, cryptographic weaknesses, and workflow sequence abuse.
>