Security testing that thinks - and proves it.
ScanRub is an automated security scanner and open research platform. We built it because most scanners produce a wall of low-confidence noise, and the real knowledge of how vulnerabilities get found lives in scattered disclosure reports and expensive training courses.
Our thesis is simple: the best offensive-security knowledge already exists in the public record. Bug bounty disclosures, CVE analyses, and security research collectively encode decades of practical exploitation experience. We turn that raw knowledge into detection strategies, then ship it as an automated scanner that everyone can use.
Our mission
Make offensive-security knowledge accessible and actionable. Turn every disclosed vulnerability into a defense that protects the next application.
We believe security shouldn't be gate-kept behind $50k consulting engagements or five-figure per-year tool licenses. The knowledge is public. The tools are open source. What was missing was a platform that connects them into something a developer or bug bounty hunter can actually use in five minutes.
What we believe
A finding you can't trust is worse than no finding. Everything we ship is validated before it reaches you.
The scanner narrates its progress and cites its evidence. No black boxes - you can see exactly how a bug was found.
Our detection reflects how vulnerabilities are actually found in the wild, mined from thousands of disclosed reports.
Built by and for bug bounty hunters, AppSec engineers, and developers who care about doing security right.
How we work
Automated scanners have a bad reputation because most of them produce noise. We built ScanRub with an AI validation gate specifically to fix this - every finding gets reviewed before you see it. If we can't validate it, we don't ship it.
Our vulnerability research is derived from thousands of publicly disclosed HackerOne reports and published openly under Creative Commons. Others can use it, cite it, and build on it. The knowledge belongs to the security community.
ScanRub has technical guardrails against unauthorized scanning: rate limits, domain validation, and terms enforcement. We refuse business from anyone using the tool for unauthorized testing. This isn't optional to us.
Every detection module and research playbook is reviewed by working penetration testers before shipping. Automation doesn't replace expertise - it amplifies it.
The story so far
Built as a side project after too many scans returning 500 low-signal "findings" that took hours to triage.
25 security tools orchestrated into an adaptive pipeline. Recon → Testing → Reporting.
Every finding validated by an LLM before it reaches the report - built to cut false-positive noise, the biggest complaint about automated scanners.
182 vulnerability playbooks synthesized from 8,598 HackerOne disclosures. Public and free.
A growing platform used by bug bounty hunters, AppSec teams, and developers to find real vulnerabilities without the noise.
Get involved
Bug bounty hunters use it to find bugs faster. AppSec engineers use it to catch what ships before an attacker does.