Hosted vulnerability scans for your servers and websites
Joined February 2020
- Tweets46
- Following3
- Followers64
- Likes7
ZAP released a check that HostedScan is already running via a passive rule for detecting PHP2Shell via the X-Powered-By and Server headers:
Blog: Detecting PHP2Shell and Other PHP Vulnerabilities with ZAP
PHP2Shell is the latest big “named” vulnerability. ZAP can now tell you if a site is running a vulnerable version of PHP, and it does so without sending a single extra request.
zaproxy.org/blog/2026-10-22-…
#php2shell
Nuclei has updated their PHP2Shell detection and merged it.
Tenable Nessus has added additional detection tests.
OpenVAS and Greenbone Enterprise now include a detection for authenticated internal scans for PHP2Shell.
Tracking updates here:
hostedscan.com/blog/php-crit…
Tenable Nessus has scanning coverage for PHP CVE-2026-109618 and CVE-2026-109619.
We've updated our tracker:
hostedscan.com/blog/php-crit…
We're tracking the status of vulnerability scanners updating to detect PHP's CVE-2026-109618 and CVE-2026-109619 vulnerabilities affecting up to 70% of web sites.
So far, both Nuclei and Tenable have detection tests in development, but not yet released.
hostedscan.com/blog/php-crit…
⚡️ Every scanner, one API call away.
Two new agent skills for HostedScan: one gives your agents vulnerability scanning, the other troubleshoots the scans that go sideways.
Plus a full pass over the API docs.
hostedscan.com/blog/api-and-…
🛡️ Nessus is now on HostedScan. Run it on external targets, an appliance inside your network, or the agent on your laptops. 200,000+ plugins, one dashboard, no Tenable subscription.
Read more: hostedscan.com/blog/hostedsc…
We've shared some of our favorite open-source vulnerability scanning tools in our newest blog post. Let us know if we missed any of your favorites.
hostedscan.com/blog/best-ope…
Azure! We've released support for importing targets and assets from Microsoft Azure. Go try it out and let us know how it's working for you.
We've launched our Snyk risk integration. Now you can unify more of your risk insights with one definitive report from HostedScan.
A hint for what's next:
Seeking fortune, seeking treasure,
many companies make their measure,
by launching targets in a cloud named...
We've launched a fresh look for HostedScan. We're modernizing our design and aiming for a clean feel. Check us out at hostedscan.com and let us know what you think.
Hope everyone had a great end to 2023. Looking forward to working together in 2024 and helping to secure businesses around the world!
We've cooked up new features in our API to make target filtering even easier. You can now filter by tag and label.
Import our OpenAPI definition into Postman and check it out!
docs.hostedscan.com/#tag/API…
Just added one of the most requested features, you can now stop any in progress scan with just a click
HostedScan Security retweeted
🏆 SaaSHub Experts Top 5 products
of May 02, 2023
1. @coinbase
2. Venmo
3. @_youdotcom_
4. @ZeroGpt
5. @hostedscan
Pls RT 🙇. All details and the rest of the nominations: saashub.com/experts/rounds/5…
We've updated authenticated scans to use the latest @SeleniumHQ runtime and to save the full test logs for verification and troubleshooting. #websecurity
We're hiring senior full stack engineers! If you are one, or know somebody, please have them apply: hostedscan.com/careers
#hiring #fullstackdeveloper