Vexta · Monthly
Vexta Essentials - Monthly: vulnerability scanning that ships findings, not noise.
Single-target scanning with proof-of-exploitation verification, quick and standard scan profiles, web vulnerability and recon checks, 10 scans a month and email support. For bug hunters and solo researchers.
Vexta
Vexta Essentials - Monthly
Single-target scanning with proof-of-exploitation verification, quick and standard scan profiles, web vulnerability and recon checks, 10 scans a month and email support. For bug hunters and solo researchers.
Billed monthly. Cancel any time.
Refunds follow our Terms: up to 80% within 30 days of your first purchase, then pro-rated for unused time on quarterly and yearly plans. Monthly plans are not refunded after 30 days.
Get started →Why this tier
What you get with Vexta.
No agents to install
A single binary on a machine you control. Point it at a target, get results.
Verified findings
Proof-of-exploitation checks on every plan mark each finding proven, refuted or unproven.
Self-hosted
Runs on your own hardware or a cloud VM (AWS, GCP, Azure or similar). Results stay there unless you turn on an integration that sends them out.
CI/CD output
Pro and Enterprise: the scan-ci command writes SARIF, JUnit and JSON and fails builds on the severities you choose.
Reports
Pro and Enterprise: HTML and PDF reports with an executive summary and remediation steps. Enterprise adds compliance evidence packs.
OWASP Top 10 and CVE checks
Web vulnerability checks for OWASP Top 10 classes on every plan; CVE matching against a local NVD, EPSS and KEV mirror, and dependency (SCA) checks, on Pro and Enterprise.
Everything in Essentials.
The short list above is the headline. Open the full list for every check and capability this plan unlocks in the Vexta binary.
Show full feature list (13 features)Hide full feature list
Included on every plan
- IncludedPassive OSINT recon and subdomain enumeration across 40+ public sources
- IncludedAsset intelligence: host, IP, open ports, technology stack and TLS certificate summary
- IncludedCore web vulnerability checks for OWASP Top 10 classes (SQL injection, reflected XSS, command injection, file inclusion, CRLF, open redirect, CORS)
- Included10,000+ bundled vulnerability templates in every binary (community templates from ProjectDiscovery’s nuclei-templates)
- IncludedJSON scan output and a native Word (DOCX) report on every scan
- IncludedBuilt-in dashboard with real-time updates and a light or dark theme
- IncludedWAF detection and adaptive rate limiting
- IncludedPlain-language explanation, impact and CWE/OWASP references on every finding
Recon and discovery
- IncludedContent and URL discovery: Wayback history, directory and content fuzzing, exposed-file checks and injection-class bucketing
- IncludedNetwork port and service scanning (SYN and ACK scans, service detection)
Vulnerability scanning
- IncludedSource-code pattern (SAST) checks: SSRF, XXE, weak crypto, SQL concatenation, path traversal and more
Verification and intelligence
- IncludedProof-of-exploitation verification on every finding (proven, refuted or unproven)
Platform, scale and audit
- IncludedQuick and standard scan profiles
Get started with Vexta Essentials - Monthly.
Questions before you buy? Free 30-minute call. Fixed quote in 1 business day for anything custom.