What is the Vulnerability Lab?

An AppSec toolkit at rhypernova.com/vulnerability for scoped page scans, API/frontend/backend/SQL security scans, code weakness finding, attack paths, remediation, and scorecards.

Can I scan a live website?

Yes. 2-page and 5-page scoped scans can fetch live URLs and report weaknesses with remediation guidance.

Does it scan APIs and SQL?

Yes. Dedicated API Security Scan and SQL Security Scan tools analyze endpoints, auth models, and query risks.

Is this for ethical security testing?

Yes. Tools are designed for authorized AppSec review, secure coding, and remediation planning — only scan systems you own or have permission to test.

Is the vulnerability scanner free?

Yes. Core Vulnerability Lab tools are free in the browser.

SaaS application security

Vulnerability Scanner

12 independent scans — 2-page, 5-page, full application, API, frontend, backend, SQL, weaknesses, threats, attack paths, remediation, and scorecard. Each finding includes how an attacker moves and how to fix it.

Scoped Scans

2-Page Quick ScanLive multi-surface scan of up to 2 URLs — HTML/CSS/JS/API/AI entry ways, weakness points, and fixes.5-Page Standard ScanDeeper live scan (up to 5 URLs) mapping forms, scripts, APIs, headers, and cross-page attack paths.Full Application ScanEntire-application inventory scan: routes, APIs, frontend, backend, SQL, secrets, and attack surface.

Attack Surfaces

API Security ScanScan OpenAPI/REST endpoints for auth gaps, IDOR risks, injection points, and API hacking paths.Frontend Security ScanAnalyze HTML/JS/SPA markup for XSS sinks, insecure storage, mixed content, and client-side threats.Backend Security ScanReview backend code/config for auth flaws, SSRF, deserialization, secrets, and privilege risks.SQL Security ScanDetect SQL injection patterns, weak queries, missing parameterization, and database hardening gaps.

Deep Analysis

Code Weakness ScannerSAST-style weakness detection (CWE-oriented) with severity, evidence, and secure coding fixes.Threat Surface AnalyzerMap threats across users, APIs, data stores, and third parties — STRIDE-inspired SaaS threat model.Attack Path FinderFrom each entry point, show how an attacker could move — and the exact fix for each hop.

Fix & Score

Remediation AdvisorTurn scan findings into a prioritized fix backlog with owners, effort, and verification steps.Security ScorecardUnified SaaS scorecard across security, vulnerability, weakness, threats, and hacking points.