Web Security Intelligence

Decloak offers a comprehensive web security scanning solution designed for various users, including vibe coders, small businesses, compliance teams, agencies, solo builders, security teams, and MSPs. It provides a free, automated web security intelligence service that scans a single page in 15 seconds, delivering a scored and graded report. For deeper insights, Decloak offers an AI agent that investigates findings across the entire site, authenticated penetration testing, and compliance-ready evidence mapped to standards like SOC 2, ISO 27001, NIS2, DORA, LGPD, and PCI DSS.

• Key Features:
  • Free, single-page security scan in 15 seconds.
  • AI agent for in-depth site investigation.
  • Authenticated penetration testing.
  • Compliance-ready evidence generation for major standards.
  • Detection of JavaScript CVEs, hidden trackers, exposed subdomains, DNS/TLS misconfigurations, and publicly readable databases.
  • Platform-specific security checks for builders like Supabase, Lovable, and Base44.
  • OWASP Top 10 coverage checklist in every report.
  • Priority Remediation Plan to identify top fixes.
  • Scheduled recurring scans for continuous security monitoring.
  • Multi-domain dashboard for agencies and MSPs.
  • Active Security Testing (DAST) and AI Pentesting for enterprise clients.

Decloak aims to provide automated web security intelligence, making security accessible and actionable for businesses of all sizes. The platform continuously evolves, with recent updates including PCI DSS v4.0 mapping and an explicit OWASP Top 10:2025 coverage checklist.