Sploit.io
Sploit.io is a free web service for checking browsers for vulnerabilities and related information.
What Sploit.io is
Sploit.io is a free web service for checking browsers for vulnerabilities and related information. It says its detection system identifies in real time which CVEs a browser may be vulnerable to. Additional checks cover connection details, speed, system information, geolocation, open ports, browser components and plugins, vulnerabilities, exploits, social media, Spectre, and EICAR. Some results rely on GetIPIntel.net, Check.Torproject.org, IPinfo.io, and Google Maps. Sploit.io says it shares IP addresses with the first three services and IP addresses and GPS coordinates with Google Maps. Its privacy policy says it does not collect test results, though access logs include the time, IP address, and user agent string. API response data expires after 12 hours, and API use is counted. The service is free and supports web browsers, but not mobile platforms currently. Its terms caution that checks can return false positives or inaccurate results. Demo exploits require the visitor to press Execute rather than running automatically.
Good
- Free browser vulnerability scanning.
- Identifies browser CVEs in real time.
- Offers a broad set of custom checks.
- Demo exploits require an Execute action.
Watch out
- Mobile platforms are not currently supported.
- Results may include false positives or inaccuracies.
- Some data is sent to third-party APIs.
Who it suits
Sploit.io may suit people who want browser vulnerability checks and related system or connection information through a web service. It is not currently intended for mobile platforms.
Verdict
Sploit.io combines browser CVE checks with a wide range of additional tests at no cost. Keep its accuracy caveat, mobile limitation, and third-party data sharing in mind.
Plans and prices
From Sploit.io's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free service | Free | Browser vulnerability scanning |
The facts
Each one read from Sploit.io's own pages, with the date it was checked.
What it does
- API availability
- The API section describes third-party APIs used by the service and says Sploit.io might provide its own API in the future.checked 5 Oct 2026
- API response storage
- The privacy policy says API response data is stored with a 12-hour expiration and test initiations per API are counted.checked 11 Oct 2026
- Custom checks
- Custom tests include connection, speed, system, geolocation, open ports, browser components, plugins, vulnerabilities, exploits, social media, Spectre, and EICAR checks.checked 11 Oct 2026
- CVE detection
- The site says it can identify in real time which CVEs a user's browser is vulnerable to.checked 11 Oct 2026
- Data retention
- The privacy policy says API response data is stored with a 12-hour expiration and that it records how often each API is used.checked 5 Oct 2026
- Data shared with APIs
- The listed API requests send IP addresses, and the Google Maps entry says it receives IP and GPS coordinates.checked 11 Oct 2026
- Exploit execution
- The terms say demo exploits are not executed automatically and require the visitor to press the Execute button.checked 5 Oct 2026
- Exploit safety
- The terms say demo exploits are not executed automatically and require the visitor to press an Execute button.checked 11 Oct 2026
- Mobile support
- The About section says mobile platforms are not supported and mentions future plans for iOS and Android support.checked 11 Oct 2026
- Operator
- The terms identify the webmasters as SPUZ.checked 11 Oct 2026
- Privacy
- The privacy policy says test results are not collected, except that access logs contain the time, IP address, and user agent string.checked 11 Oct 2026
- Purpose
- Sploit.io describes itself as a free service for finding and alerting users to flaws and vulnerabilities in their browser.checked 11 Oct 2026
- Support
- The site invites suggestions by email at [email protected] or through its linked Twitter account.checked 5 Oct 2026
- Support contact
- The About section invites suggestions by email at [email protected] or through its linked Twitter account.checked 11 Oct 2026
- Test limitations
- The terms say tests can produce false positives and results may not be 100% accurate.checked 11 Oct 2026
- Third-party APIs
- Sploit.io lists GetIPIntel for proxy/VPN/bad-IP detection, Check.Torproject.org for Tor exit-node detection, IPinfo for hostname and geolocation, and Google Maps for displaying location.checked 11 Oct 2026
- Third-party services
- Sploit.io lists GetIPIntel.net, Check.Torproject.org, IPinfo.io, and Google Maps among the APIs it uses for test results.checked 5 Oct 2026
Alternatives to Sploit.io
- 1
NSAuditor AI
Free planOpen sourceAPILinuxmacOSSelf-hosted8.0From $470 a year - 2
ManageEngine Vulnerability Manager Plus
Free planWebAPILinuxmacOS7.9From $695 a year - 3
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 4
Intruder
Free planWebAPILinuxmacOS7.4Free plan - 5
OpenVAS
Free planWebAPILinuxmacOS7.2From €2,524 a year - 6
Nmap
Free planLinuxmacOSSelf-hostedWindows7.0From $9,980 a month