ScanTitan
ScanTitan is a cloud-based platform for vulnerability scanning and attack-surface monitoring, with malware detection and removal.
What ScanTitan is
ScanTitan is a cloud-based platform for vulnerability scanning and attack-surface monitoring, with malware detection and removal. Its network scanner finds live hosts, identifies services on open ports, and checks software versions against a database containing more than 100,000 CVEs. Coverage includes known vulnerabilities, misconfigurations, weak or default credentials, network devices, SSL/TLS, and end-of-life services. Findings include reproducible request-and-response evidence and CVSS and EPSS prioritization. Reports can be exported as PDF, JSON, or HTML, with compliance exports mapped to PCI DSS 11.3, ISO 27001, SOC 2, and HIPAA. Integrations include Slack alerts, Jira ticket creation, AWS, Azure and GCP coverage, SIEM export, a REST API, and JSON webhooks. The free plan requires no credit card and has no trial expiry; Professional costs $119 a year, billed yearly. ScanTitan is available on the web and by API, and scans only customer-specified external-facing assets—not internal infrastructure or employee devices.
Good
- Checks against a database of over 100,000 CVEs
- Findings include reproducible request-and-response evidence
- Exports reports as PDF, JSON, and HTML
- Free plan has no credit card requirement or expiry
Watch out
- Does not scan internal infrastructure or employee devices
- Professional costs $119 a year, billed yearly
Who it suits
It may suit SMBs, mid-market SaaS firms, e-commerce businesses, digital agencies, and compliance-driven industries seeking scans of specified external-facing assets. The stated scope excludes internal infrastructure and employee devices.
Verdict
ScanTitan combines external asset scanning, malware tools, integrations, and compliance-oriented reporting. Its stated scanning scope is limited to customer-specified external-facing assets.
Plans and prices
From ScanTitan's own pricing page, checked 3 Oct 2001.
| Plan | Price | What it gives you |
|---|---|---|
| Professional | $119 a year | Advanced vulnerability and exposure scanning · Advanced malware monitoring · Uptime, vulnerability, and exposure monitoring · yearly |
| Business | $155 a year | 360° vulnerability and exposure scanning · Network exposure monitoring · Brand monitoring · Vulnerability and exploit intelligence · API access · yearly |
| Consultant | $486 a year | 360° vulnerability and exposure scanning · OWASP Top 10 scanning · Unlimited scans · Unlimited add/delete websites · API access · White-labeled PDF reports · yearly; price per concurrent websites |
| Free | — | Malware scanning · Basic exposure scanning · Basic malware monitoring · Basic uptime monitoring · yearly |
| Enterprise | Priced on request | 360° vulnerability and exposure scanning · Threat intelligence · Custom scan limits · SLA and dedicated support available · custom pricing for your team |
The facts
Each one read from ScanTitan's own pages, with the date it was checked.
What it does
- API access
- The pricing page lists API access for Business, Consultant, and Enterprise plans.checked 3 Oct 2001
- Confirmed findings
- The network scanner says confirmed findings include reproducible request-and-response evidence and prioritization using CVSS and EPSS.checked 3 Oct 2001
- Coverage
- The network scanner describes checks for known CVEs, misconfigurations, weak or default credentials, network devices, SSL/TLS, and end-of-life services.checked 3 Oct 2001
- Data handling
- The company says scan findings remain in the customer account during the active plan, can be deleted on request, and are not sold or shared with third parties.checked 3 Oct 2001
- Integrations
- The network scanner lists Slack alerts, Jira ticket creation, AWS, Azure and GCP cloud coverage, SIEM export, REST API, and JSON webhooks.checked 3 Oct 2001
- Intended users
- The company identifies SMBs, mid-market SaaS firms, e-commerce businesses, digital agencies, and compliance-driven industries as intended customers.checked 3 Oct 2001
- Limits
- The company says it scans only external-facing assets specified by the customer and does not scan internal infrastructure or employee devices.checked 3 Oct 2001
- Network scanning
- Its network scanner discovers live hosts, fingerprints open-port services, and matches versions against a database of more than 100,000 CVEs.checked 3 Oct 2001
- Product
- ScanTitan describes a cloud-based vulnerability scanning and attack-surface platform that also offers malware detection and removal.checked 3 Oct 2001
- Reporting
- Network scan reports can be exported as PDF, JSON, and HTML, and the page says compliance exports map to PCI DSS 11.3, ISO 27001, SOC 2, and HIPAA.checked 3 Oct 2001
- Security
- ScanTitan says it is SOC 2 Type II attested, ISO 27001 certified, and operates under GDPR; reports and certificates are available on request.checked 3 Oct 2001
- Support
- The pricing page says every package includes 24/7 email support, while Enterprise offers dedicated support and an SLA.checked 3 Oct 2001
The company
- Founded
- 2014checked 28 Sep 2001
- Headquarters
- The Hague, Netherlandschecked 28 Sep 2001
Money
- Free access
- The pricing page describes a free plan with no credit card and no trial expiry, and the contact page also offers a free domain scan without an account.checked 3 Oct 2001
Alternatives to ScanTitan
- 1
NSAuditor AI
Free planOpen sourceAPILinuxmacOSSelf-hosted8.0From $39.17 a month - 2
ManageEngine Vulnerability Manager Plus
Free planWebAPILinuxmacOS7.9From $57.92 a month - 3
OpenVAS
Free planWebAPILinuxmacOS7.1From €210.33 a month - 4
Pentest-Tools Port Scanner
Free planWebAPI7.0From $95 a month - 5
NSAuditor AI
Free planLinuxmacOSSelf-hostedWindows6.9From $39.17 a month - 6
Qualys External Attack Surface Management
Free planWebAPILinux6.9Free plan