AI Web Vulnerability Scanning Platform
vScanly
AI Web Vulnerability Scanning Platform
Finds web vulnerabilities through static, pattern, and dynamic analysis, then automatically generates reports aligned to the KISA, NIS, MOIS, and OWASP standards.
Process
How a scan runs
- 01
Register the target
Add domains or URLs to a project, or start with Quick Scan on a single URL.
- 02
Automatic scan
Static and pattern checks run first, then plans can extend into dynamic and deeper stages. Nuclei and OWASP ZAP adapters handle detection.
- 03
Map to standards
Findings are classified against KISA, NIS, MOIS, and OWASP items automatically.
- 04
Report
Results land in the UI and PDF. AI helps draft role-specific summaries and remediation wording.
Key Features
Key features
Static, pattern, and dynamic pipeline
Static rules and signature pattern checks first, then dynamic and deeper stages by plan.
Nuclei + OWASP ZAP
Standard scan engines connect through adapters so results stay in one place.
Automatic standards mapping
Classify findings against KISA, NIS, MOIS, and OWASP for audit and compliance evidence.
Quick Scan
Run a light check on one URL without signing in before a full engagement.
PDF and scheduled reports
One-shot and Pro include full PDFs; Pro adds weekly or monthly email delivery.
AI report assist
AI drafts role-specific summaries and remediation wording for leadership, engineering, and ops.
Engines detect, AI explains
Severity and detection stay with scan engines and rules; AI focuses on reporting and explanation.
Weekly and monthly schedules
Pro and Enterprise can schedule recurring scans and PDF reports automatically.
Use Cases
Where teams use it
Common patterns around web vulnerability scanning, Quick Scan, and report scope.
- 01
Scheduled web vulnerability checks
Scan public or enterprise sites on a Pro plan with weekly or monthly runs and PDF reports to registered mailboxes.
- 02
Quick Scan first
Hit an external URL once without signing in to get a risk snapshot before a deeper engagement.
- 03
Audit-ready reports
Bundle KISA- and OWASP-mapped findings and evidence into one PDF for internal audit or external review.
- 04
One-shot before launch
Deep-scan one domain once before go-live or a major release and receive a full PDF.
Plans
Service and pricing
Try Free, then scale through One-shot, Pro, and Enterprise. Start on the SaaS landing when you are ready.
Limits and prices match vscanly.com. VAT is extra.
Free
₩0
Try safe scanning on one domain at no cost.
- 1 domain, 1 project
- 3 Quick safe scans per month
- Severity and type only (no full report or export)
One-shot
₩29,000
One deep scan on one domain with a full PDF, no subscription.
- 60 static rules + pattern scan (OWASP, CWE mapping)
- Full PDF (KISA, NIS, MOIS, OWASP)
- Dynamic, expert review, multi-domain: contact us
- Popular
Pro
₩89,000/mo
The subscription plan teams use for ongoing operations.
- 3 domains per project, up to 3 projects
- 30 safe scans per month (static and pattern)
- Weekly or monthly PDF email, AI summaries
Enterprise
₩290,000/mo
Higher limits plus dynamic scanning.
- 10 domains per project, up to 20 projects
- 200 scans per month (static, pattern, dynamic ZAP)
- Rescan, priority support, team features
On-premise and large custom deployments are quoted separately.
Standards Mapping
Standards mapped in reports
Shows which security standard each finding maps to - not a partnership or certification claim. Use it as audit evidence as-is.
KISA
Korean web vulnerability inspection and diagnosis categories. Grouped under KISA-style rows in the domestic view and PDF.
NIS
Categories aligned with NIS security guidance and check items. Findings link to NIS rows where rules apply.
MOIS
Ministry of the Interior and Safety (MOIS) related security classifications. Mapped to MOIS rows for domestic audit material.
OWASP
International web app categories such as OWASP Top 10. Organized by OWASP category in international and executive views.
CWE
MITRE Common Weakness Enumeration, including Top 25. Pattern and static hits expand into CWE and Top 25 rows.
CVE
Public vulnerability IDs (MITRE CVE, NVD metadata). CVE and CVSS on each finding row for evidence and priority.