Free scan
Your first scan is on us.
See real findings from your own systems before you spend anything. One scan and one full report per company.
Choose one target
- One web app or APIYour web application or its API, tested from the outside like an attacker would.
- One mobile appAn Android or iOS app, from its store link or app file.
- Up to 5 public IP addressesThe services exposed on them, checked at surface level. Web applications on these addresses are not tested in this option.
How it works
- Tell us what to scanSend the target through the contact form or email sales@cerberon.dev.
- Sign the authorisationA person authorised to approve testing signs the letter below, with proof your organisation owns the target.
- Get your reportWe run the scan in the window you agreed and send you the full report.
Letter of authorisation
Copy it onto your letterhead, fill in the brackets, sign it and email it to sales@cerberon.dev. We never scan without it.
LETTER OF AUTHORISATION FOR A SECURITY SCAN To: Cerberon (sales@cerberon.dev) Date: [date] We, [company legal name], of [registered address], authorise Cerberon to carry out one free security scan of the targets below. Scan type (choose one): [ ] One web application or API [ ] One mobile application [ ] Up to 5 public IP addresses (exposed services only, web applications are not tested) Targets: [URL, app store link or app file, or the IP addresses] Testing window: [start date and time] to [end date and time], [time zone] Contact during the scan: [name, phone, email] We confirm that: 1. Our organisation owns or controls every target listed above, or has the owner's written permission to authorise this scan. 2. The person signing below is entitled to approve security testing of these targets. 3. We understand that a security scan can cause slowdowns or errors on the systems tested, and we accept that risk for the targets listed. 4. We will tell our hosting or cloud provider about the scan where their terms require it. Proof of ownership: [this letter is sent from an email address at the target's domain, OR a screenshot from the domain registrar or app store console] Signed: ______________________ Name: [name] Title: [title] Work email: [email]
Free scan questions
Is the free scan really free?
Yes. There is no invoice and no card. One scan and one full report per company, so you can judge our results before you buy anything.
What can we have scanned?
Your first scan is free: one web app or API, one mobile app, or up to 5 public IP addresses, with a full report. One per company.
Who has to sign the letter of authorisation?
A person entitled to approve security testing of the targets, such as a director, the CTO or the head of IT. We start only after we receive the signed letter and proof that your organisation owns the target.
Do you retest after we fix the findings?
The free scan includes one report and no retest. Retesting is part of every paid engagement and of the manual pentest in the annual licence. See pricing.
Want more than one scan?
The annual licence runs unlimited scans on your own server and includes a manual pentest every year.