Scanners

SecurityLayer integrates six industry-leading open-source scanners. Each is optimised for different types of targets and vulnerabilities.

Nmap

All plans

The industry-standard network mapper. Discovers open TCP and UDP ports, identifies running services and versions, and detects operating systems. Best for initial reconnaissance and attack surface mapping.

Targets	Servers, Networks
Detects	Open ports, service versions, OS fingerprints, NSE script-based vulnerabilities

SSLyze

All plans

Fast SSL/TLS configuration analyser. Checks certificate validity, expiry dates, cipher suite strength, and protocol support. Catches common misconfigurations like expired certs or weak protocols.

Targets	Websites, Servers, APIs
Detects	Expired certificates, weak ciphers, deprecated protocols (SSL 2.0/3.0, TLS 1.0/1.1), certificate chain issues

Nuclei

All plans

Template-based vulnerability scanner from ProjectDiscovery. Uses a community-maintained library of thousands of detection templates covering CVEs, misconfigurations, default credentials, and exposed panels.

Targets	Websites, Servers, APIs
Detects	CVEs, misconfigurations, exposed admin panels, default credentials, information disclosures

OWASP ZAP

Premium+

Comprehensive web application security scanner. Spiders your application, then performs active testing for the OWASP Top 10 including XSS, SQL injection, CSRF, and more. Supports authenticated scanning.

Targets	Websites, APIs
Detects	XSS, SQL injection, CSRF, path traversal, insecure headers, session management flaws

OpenVAS (Greenbone)

Professional

Full-featured network vulnerability scanner with a database of over 100,000 vulnerability tests. Performs deep, authenticated scanning of network infrastructure for known CVEs and misconfigurations.

Targets	Servers, Networks
Detects	CVEs, missing patches, misconfigurations, weak credentials, compliance violations

WPScan

All plans

Specialised WordPress vulnerability scanner. Detects vulnerabilities in WordPress core, plugins, and themes using the WPScan vulnerability database. Enumerates users, plugins, and themes.

Targets	WordPress websites
Detects	Plugin vulnerabilities, theme vulnerabilities, core version issues, user enumeration, weak passwords