Offensive security tooling
Professional reconnaissance and web security testing in one operator-focused workspace. Move faster, chain workflows, and keep the signal.
Keep scope, findings, scan activity, and operator preferences in one focused workspace.
Community is built for getting started. Pro unlocks the heavier workflow for serious operators and teams.
Full offensive recon and web-security workbench with 58 modules, dashboards, Pro-only vuln checks, and saved engagement workflow.
Free core edition with 38 modules for visual recon, module discovery, and learning the SpyHunt workflow.
| Capability | SpyHunt Pro | SpyHunt Community |
|---|---|---|
| Total modules | 58 modules | 38 modules |
| Recon modules | 15, including GitHub Exposure and JS Analyzer | 14 core recon modules |
| Vulnerability modules | 25, including CVE Scanner, Auth Flow Mapper, OAuth / OIDC Audit, SQLi, XSS, SSRF, SSTI, XXE, LFI, and WordPress Audit | 6 core vulnerability checks |
| Web modules | 5 — HTTP Probe, Security Headers, Response Headers, Web Server / Tech, Broken Links | 5 — same core web probes |
| Network modules | 4, including Origin IP Discovery and CDN / WAF Fingerprint | 4, including Origin IP Discovery and CDN / WAF Fingerprint |
| Fuzzing modules | 4, including IIS Short Name Scanner and API Endpoint Scanner | 4 — same fuzzing suite |
| Cloud modules | 5 — S3, AWS, Azure, GCP, and DigitalOcean Spaces | 5 — same cloud exposure suite |
| Advanced tooling | Infrastructure Map, Monitoring, JS Lens, GraphQL Radar, and live NVD / CISA CVE data | Not included |
| Engagement dashboard | Project metrics, findings, saved modules, and trends | Overview-focused community workspace |
| Best for | Professional pentesters, bug bounty hunters, and security teams | Students, hobbyists, and first-pass recon |