# HostedScan

> HostedScan (https://hostedscan.com) is an online vulnerability scanning platform. It runs trusted, industry-standard scanners — OWASP ZAP, Greenbone OpenVAS, Nmap, SSLyze, Nuclei, and Tenable Nessus — as a managed service with scheduling, dashboards, vulnerability management, reporting, integrations, and a full REST API. Companies use HostedScan for continuous scanning of websites, web applications, APIs, servers, networks, and cloud infrastructure, and to meet compliance requirements such as SOC 2, ISO 27001, and GDPR.

HostedScan is fully hosted: there is nothing to install for external scans. Add targets — URLs, domains, IP addresses, or CIDR ranges — in the dashboard, or URLs, domains, and IP addresses via the API, and scans run on HostedScan's cloud infrastructure. Results from all scanners are normalized into a single risk dashboard with alerting, scheduled scans, PDF/CSV reports, and integrations including Slack, ticketing systems, and webhooks. Internal networks and endpoints can be scanned by deploying a scanner agent inside your network.

Free trial: organizations created by signing up directly (email magic link or OAuth login) get a 14-day free trial of the Premium plan with 5 scan targets included. Users who join an existing organization by invitation, or who sign in through SAML SSO, do not start a separate trial. No credit card is required — if no payment method is added, the trial simply ends. Sign up at https://hostedscan.com/sign-up with an email magic link or single sign-on. You can also run an instant free scan of a single URL or IP address from the https://hostedscan.com homepage. Trials of the Professional plan (which adds Tenable Nessus scanning) are available on request from https://hostedscan.com/pricing.

API access: after signing up, create an API Key in the dashboard under Settings → API & Webhook (https://hostedscan.com/settings/api). Authenticate by sending the key in the `X-HOSTEDSCAN-API-KEY` request header to the API base URL `https://api.hostedscan.com/v1`. The developer API and webhooks are included on Premium and higher plans. The API supports managing targets, starting scans, retrieving risks, generating reports, and importing results from your own scanners.

For LLM agents: the technical documentation has its own index at https://docs.hostedscan.com/llms.txt, every docs guide is served as plain markdown at its URL plus `.md` (e.g. https://docs.hostedscan.com/api-scanning.md), and agent skills for working with the HostedScan API are published at https://docs.hostedscan.com/.well-known/skills/index.json.

## Scanners

- [OpenVAS network vulnerability scan](https://hostedscan.com/openvas-vulnerability-scan): Greenbone OpenVAS scanning for servers, routers, firewalls, and other network infrastructure. Tests for 50,000+ vulnerabilities using a feed of 200,000+ Network Vulnerability Tests updated daily, detecting CVEs, out-of-date software, and misconfigurations. Can also run inside your network for internal scans.
- [OWASP ZAP web application scan](https://hostedscan.com/owasp-vulnerability-scan): Dynamic application security testing (DAST) for websites and web apps with the industry-standard OWASP ZAP scanner. Crawls traditional HTML sites as well as JavaScript single-page apps (React, Angular, Vue) and detects cross-site scripting, SQL injection, vulnerable JavaScript libraries, and other OWASP Top 10 risks. Available as a passive scan or a deeper active + passive scan, with support for authenticated scanning behind logins.
- [API security scanner](https://hostedscan.com/api-security-scanner): Scans REST APIs by importing your OpenAPI/Swagger definition and testing every endpoint for vulnerabilities. Supports authentication via custom headers such as API keys and bearer tokens.
- [Nuclei vulnerability scan](https://hostedscan.com/nuclei-vulnerability-scan): Modern, high-performance, template-based scanning with 13,000+ community-built detection templates. Detects CVEs, misconfigurations, and exposed services across web apps, APIs, and infrastructure, engineered for low false positives.
- [Nmap port scan](https://hostedscan.com/nmap-port-scan): Discovers open ports and running services with a full TCP scan of ports 0–65535 plus common UDP services. Scans single IPs, hostnames, and CIDR ranges to find exposed ports on firewalls, routers, and servers.
- [SSLyze TLS/SSL scan](https://hostedscan.com/sslyze-vulnerability-scan): Tests TLS and SSL configuration for known vulnerabilities such as Heartbleed and ROBOT, expired or broken certificates, weak cipher suites, and unsupported protocol versions.
- [Tenable Nessus scanning](https://hostedscan.com/nessus-tenable-alternative): Enterprise-grade vulnerability scanning on the Professional plan — cloud-hosted external Nessus scans, Nessus Professional for internal networks, and Nessus Agents for endpoint scanning.

## API documentation

- [Documentation llms.txt](https://docs.hostedscan.com/llms.txt): Index of all technical documentation in LLM-friendly markdown.
- [API reference](https://docs.hostedscan.com/api/): Full REST API reference for the HostedScan customer API (base URL https://api.hostedscan.com/v1).
- [Developer API guide](https://docs.hostedscan.com/developer-api.md): Getting started with API keys, authentication, and common API workflows.
- [Technical documentation](https://docs.hostedscan.com/): Documentation home covering scanning guides and platform features.
- [Authenticated web app scanning](https://docs.hostedscan.com/authenticated-scanning/header.md): Scan behind logins using authorization headers, session cookies, or recorded browser logins.
- [API scanning guide](https://docs.hostedscan.com/api-scanning.md): How to scan REST APIs from an OpenAPI/Swagger definition.
- [Internal network scanning](https://docs.hostedscan.com/internal-network-scanning.md): Deploy a scanner inside your private network and stream results to the HostedScan dashboard.
- [Endpoint agent scanning](https://docs.hostedscan.com/endpoint-agent-scanning.md): Scan laptops, workstations, and servers with lightweight endpoint agents.
- [SAML single sign-on](https://docs.hostedscan.com/saml-sso.md): Configure SAML SSO for your organization.
- [Agent skills](https://docs.hostedscan.com/.well-known/skills/index.json): Installable skills for AI agents — HostedScan API integration and scan troubleshooting.

## Help articles: scanning

- [What IP addresses are used for the HostedScan vulnerability scanners?](https://help.hostedscan.com/help/what-ip-addresses-are-used-for-the-hostedscan-vulnerability-scanners): The source IPs to allowlist so scans can reach your targets.
- [How can I fix an unreachable target?](https://help.hostedscan.com/help/unreachable-targets): Troubleshooting targets that scans cannot reach.
- [Customize request headers or cookies (OWASP ZAP)](https://help.hostedscan.com/help/customize-request-headers-owasp-zap): Send custom headers or cookies with web scans, e.g. for authentication or to bypass allowlisted firewalls.
- [Setting up authenticated scans (OWASP ZAP)](https://help.hostedscan.com/help/setting-up-authenticated-scans): Scan pages that require a login.
- [How long will a scan take?](https://help.hostedscan.com/help/how-long-will-a-scan-take): Typical scan durations by scanner type.
- [Long running scans are normal](https://help.hostedscan.com/help/long-running-scans-are-normal): Why thorough scans can take many hours.
- [Can HostedScan run internal network scans?](https://help.hostedscan.com/help/can-hostedscan-run-internal-network-scans): Options for scanning private networks behind a firewall.
- [Scanning your OpenAPI and Swagger endpoints](https://help.hostedscan.com/help/scanning-open-api-endpoints): How to scan REST API endpoints.
- [Exclude subdomains and customize the OWASP ZAP crawler](https://help.hostedscan.com/help/exclude-subdomains-and-customize-the-owasp-zap-crawler): Control which URLs the web scanner crawls.
- [How do I add anti-CSRF tokens to the ZAP web application scanner?](https://help.hostedscan.com/help/how-do-i-add-anti-csrf-tokens-to-the-zap-web-application-scanner): Configure CSRF token handling for authenticated web scans.
- [What is Quality of Detection (QoD) in OpenVAS scans?](https://help.hostedscan.com/help/what-is-quality-of-detection-qod-in-openvas-scans): How OpenVAS scores detection reliability and how to use the QoD threshold.
- [Why did a scan return a cached result?](https://help.hostedscan.com/help/cached-scan-results): When and why recent scan results are reused.
- [Can I scan for OWASP Top 10?](https://help.hostedscan.com/help/can-i-scan-for-owasp-top-10): OWASP Top 10 coverage across the scanners.
- [I'm not seeing expected open ports and vulnerabilities](https://help.hostedscan.com/help/i-m-not-seeing-expected-open-ports-and-vulnerabilities): Troubleshooting scans that find fewer results than expected.
- [How do I see all of the vulnerabilities that were tested?](https://help.hostedscan.com/help/how-do-i-see-all-of-the-vulnerabilities-that-were-tested): Viewing full test coverage for a scan.

## Help articles: results and vulnerability management

- [Why are my open ports considered a vulnerability?](https://help.hostedscan.com/help/why-are-my-open-ports-considered-a-vulnerability): How open ports are assessed as risks.
- [What is an accepted risk?](https://help.hostedscan.com/help/what-is-an-accepted-risk): Marking risks as accepted to acknowledge and filter them.
- [What is a closed risk?](https://help.hostedscan.com/help/what-is-a-closed-risk): How risks are automatically closed when no longer detected.
- [What CVSS version does HostedScan use?](https://help.hostedscan.com/help/what-cvss-score-version-does-hostedscan-use): The CVSS scoring version behind risk severities.
- [How can I use tags to manage my scans and risks?](https://help.hostedscan.com/help/how-can-i-use-tags-to-manage-my-scans-and-risks): Organizing targets, scans, and risks with tags.
- [Can I export vulnerabilities to a CSV or Excel file?](https://help.hostedscan.com/help/can-i-export-vulnerabilities-to-a-csv-or-excel-file): Exporting scan results for spreadsheets and BI tools.
- [How do I white label the HostedScan report?](https://help.hostedscan.com/help/white-label-reports): Branding PDF reports with your own logo and company name.
- [Can HostedScan integrate with my ticketing system?](https://help.hostedscan.com/help/can-hostedscan-integrate-with-my-ticketing-system): Sending risks to ticketing and workflow tools.
- [MSP workspaces explained](https://help.hostedscan.com/help/msp-workspaces): Managing multiple client environments from one account.

## Help articles: account and billing

- [How does HostedScan's target pricing work?](https://help.hostedscan.com/help/how-does-hostedscans-target-pricing-work): How targets are counted for billing.
- [Is HostedScan SOC 2 compliant?](https://help.hostedscan.com/help/is-hostedscan-soc-2-compliant): HostedScan's SOC 2 Type 2 compliance status.
- [How do I update my billing information?](https://help.hostedscan.com/help/how-do-i-update-my-billing-information): Managing payment methods and invoices.
- [How do I cancel my subscription?](https://help.hostedscan.com/help/how-do-i-cancel-my-subscription): Self-service subscription cancellation.
- [How do I delete my account?](https://help.hostedscan.com/help/how-do-i-delete-my-account): Permanently removing an account and its data.
- [Help center home](https://help.hostedscan.com/): All knowledge base articles.

## Product pages

- [Platform overview](https://hostedscan.com/platform): Scanner coverage, vulnerability management, and reporting features.
- [Pricing](https://hostedscan.com/pricing): Plans, target-based pricing calculator, and plan comparison.
- [Sign up](https://hostedscan.com/sign-up): Create an account and start the 14-day free trial.
- [External vulnerability scanning](https://hostedscan.com/external-vulnerability-scan): Scan internet-facing infrastructure.
- [Internal vulnerability scanning](https://hostedscan.com/internal-vulnerability-scanning): Scan private networks behind your firewall.
- [Attack surface management](https://hostedscan.com/attack-surface-management): Discover and monitor your external attack surface.
- [Continuous security monitoring](https://hostedscan.com/continuous-security-monitoring): Scheduled scans with alerting on new risks.
- [Automated penetration testing](https://hostedscan.com/automated-penetration-testing): Continuous automated testing between manual pentests.
- [Vulnerability management](https://hostedscan.com/vulnerability-management): Track, prioritize, and remediate risks across all scanners.
- [MSP vulnerability scanning](https://hostedscan.com/msp-vulnerability-scanner): Multi-tenant workspaces and white-label reporting for MSPs and MSSPs.
- [Compliance](https://hostedscan.com/compliance): Vulnerability scanning for SOC 2, ISO 27001, GDPR, and Trusted Partner Network requirements.

## Optional

- [About](https://hostedscan.com/about): Company background.
- [Blog](https://hostedscan.com/blog): Security articles and product updates.
- [Status page](https://status.hostedscan.com/): Live service status.
- [WordPress vulnerability scan](https://hostedscan.com/wordpress-vulnerability-scan): Scanning WordPress sites.
- [Cloud security vulnerability scanner](https://hostedscan.com/cloud-security-vulnerability-scanner): Scanning AWS, Azure, and GCP-hosted infrastructure.
- [DAST scanning](https://hostedscan.com/dast-scan): Dynamic application security testing overview.
- [Subdomain discovery tool](https://hostedscan.com/subdomain-discovery-tool): Free tool to enumerate subdomains.
- [SPF, DKIM, DMARC security tool](https://hostedscan.com/spf-dkim-dmarc-security-tool): Free email security record checker.
- [Terms and policies](https://hostedscan.com/terms-and-policies): Terms of service, privacy policy, and SLA.