Question 1

What is ScanRub?

Accepted Answer

ScanRub is an automated AI security scanner. You point it at a target and it maps the attack surface, runs 25 security tools through a multi-stage pipeline, validates findings to remove false positives, and produces an evidence-rich report.

Question 2

How is this different from a traditional scanner?

Accepted Answer

Traditional scanners run a fixed checklist and produce noisy, low-confidence output. ScanRub adapts to each target like a human pentester, chains findings, and runs every candidate through an AI validation gate so you only see what matters.

Question 3

Do I need authorization to scan a target?

Accepted Answer

Yes - always. You may only scan systems you own or are explicitly authorized to test. Unauthorized scanning may be illegal and is prohibited by our Terms.

Question 4

Where does the research content come from?

Accepted Answer

Our vulnerability encyclopedia and research playbooks are synthesized from thousands of publicly disclosed HackerOne reports, summarized for educational and defensive use.

Question 5

What vulnerabilities can it find?

Accepted Answer

Detection spans dozens of vulnerability classes - including SSRF, IDOR, XSS, SQL injection, CSRF, XXE, request smuggling, business-logic flaws, and misconfigurations - mapped to CWE and OWASP. 21 of them are documented in depth in the public encyclopedia.

Question 6

Can I use it for bug bounty?

Accepted Answer

Yes. Many users run ScanRub for recon and triage on programs they are authorized to test. Always respect each program’s scope and rules.

Question 7

Does it produce false positives?

Accepted Answer

Every finding passes an LLM validation gate that reclassifies severity and filters likely false positives. Findings are graded by confidence so you can prioritize.

Question 8

Is there a free plan?

Accepted Answer

Yes - the Researcher plan is free forever and includes full automated scanning and full access to the research library and encyclopedia.

Frequently asked questions