MrPenetrator
Authorised website security investigations
MrPenetrator helps defenders investigate websites they own or are authorised to test. Start with a free Quick scan for passive exposure signals, or run Deep Pro for authenticated crawl, injection probes, access control review, AI workers, executive export, and retest.
What we check
- Security headers, TLS/certificate posture, and CSP weaknesses
- Email authentication: SPF, DKIM (including ESP CNAMEs), DMARC policy completeness, MTA-STS
- Attack-surface crawl, safe injection probes, and IDOR/BOLA object-ID swaps
- Session cookie hardening with realistic SameSite guidance
- AI-assisted remediation playbooks and confidence-aware findings
Authorised testing only
Deep active modules require domain ownership verification. Only scan systems you own or have written permission to assess.