Better than a scanner dump

What do you want to scan?

Seven jobs. Nova ranks the issues and puts the fix first. Authorized targets only — no exploit payloads.

  • One card per target type — not 90 overlapping tools
  • Fix-first queue with a letter grade
  • GitHub, code, SQL, and DevOps in the same console
URLWebsite

Scan a live site you own: pages, headers, TLS, cookies, and exposed files.

Scan Live site →CodeSource code

Paste application source. Finds secrets, injection, XSS, and weak crypto.

Scan Paste source →SQLSQL

Paste SQL, ORM, or query code. Checks injection and unsafe query patterns.

Scan Queries →ConfigDevOps

Paste Dockerfile, Kubernetes, Terraform, or CI YAML.

Scan Docker & CI →GitHub URLGitHub repository

Point at a repo you own, or paste files. Secrets, SAST, and dependencies.

Scan Your repo →APIBackend API

Scan an API URL or OpenAPI spec: auth, BOLA, and injection surfaces.

Scan OpenAPI / URL →URLBackend URL

Scan a backend host or service URL: ports, headers, and server exposures.

Scan Service host →

Recent scans

No scans yet. Open a card above.