Skip to content
New: VulnScanAI scans your website and explains every finding in plain English. Run a free scan

Your scanners find problems. VulnScanAI tells you what to do next.

Built by iSec Services. Scan websites, networks and applications you're authorised to test, get findings explained in plain English, and check your readiness for India's DPDP Act, RBI and SEBI cybersecurity requirements.

Opens isecai.io. Free Basic plan available. Log in

DPDP readinessExample result
Notice and consentPartial
Data principal rightsGap
Security safeguardsReady
Breach readinessPartial
Next step: publish a process for access and erasure requests.

How a scan works

  1. Step 1

    Choose a target

    A website, IP address or application you own or are authorised to test.

  2. Step 2

    Run the scan

    Pick a scan type, or combine several. VulnScanAI runs the tooling for you.

  3. Step 3

    Fix in order

    Read each finding in plain English, ranked by severity and impact, with the fix.

What's inside

AI vulnerability scanner
Ports and exposed services, SSL/TLS, web applications, databases, cloud configuration and mobile app packages.
Security report analyser
Upload a report from your existing tools. Get severity, evidence and fixes explained, ask follow-up questions, and compare against earlier scans.
One prioritised view
Findings from different tools and assessments in one list, ordered by what matters most.
DPDP Act readiness
Personal data handling, notice and consent, data principal rights, retention, governance, incident readiness and processors.
RBI cybersecurity assessment
For banks and regulated entities. A maturity score and a remediation plan.
SEBI cybersecurity assessment
For brokers and trading firms. Questionnaire based, no URL needed.

Assessments are readiness tools, not a certificate of legal compliance. For an independent audit, iSec's compliance team can take it from there.

Scan inside your network

Install the VulnScanAI agent on a machine inside your network to reach systems that aren't exposed to the internet.

Plans

Basic

Free

Port and SSL scanning, AI report analysis, web, database, cloud and mobile app scans.

Advanced

Monthly or yearly

Adds full AI report analysis, ZAP web app scanning, Nikto server scanning, SQLMap and Prowler AWS checks.

Ultimate

Monthly or yearly

The top tier, with the full Advanced toolset. See the pricing page for what each tier includes today.

Pay by PayPal or UPI. Yearly billing saves 15%.

Want an expert to read the results?

VulnScanAI shows what to fix. iSec's certified testers can verify it, test deeper and sign off for your auditor.

Common questions

Is VulnScanAI free?

The Basic plan is free and includes port and SSL scanning, AI report analysis, and web, database, cloud and mobile app scans. Paid Advanced and Ultimate plans add ZAP, Nikto, SQLMap and Prowler AWS checks.

What can VulnScanAI scan?

Websites, IP addresses and networks, SSL/TLS configuration, web applications, databases, cloud configuration and mobile application packages. Agents for Windows, Linux and macOS reach internal systems.

Does a DPDP assessment prove compliance?

No. The DPDP, RBI and SEBI assessments are readiness tools that show gaps and next steps. They are not legal advice or certification. iSec's compliance team can carry out an independent audit.

Can I scan any website?

Only systems you own or are authorised to test. VulnScanAI asks you to confirm authorisation before each scan.