| What it does | Web security intelligence platform that scans sites across eight layers and provides audit-ready evidence
| Fraud detection and prevention for web apps that detects account abuse and bots under any masking
|
|---|
| Stage | Not given
| Startup
|
|---|
| Founded | Not given
| 2025
|
|---|
| Based in | GB
| US
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free tier with no account required. Starter from £29/month. Pro from £79/month. Enterprise from £99/month.
| Free tier with 5,000 identifications. Paid plans: Starter $99/month for 25,000 identifications (monthly billing) or $79/month billed yearly; Growth $399/month for 150,000 identifications (monthly) or $319/month billed yearly; Scale $999/month for 500,000 identifications (monthly) or $799/month bille
|
|---|
| Key features | - 8-layer security analysis covering HTTP/TLS, HTML, network traffic, JavaScript CVEs, tag managers, third-party supply chain, platform misconfigurations, and server software CVEs
- Single-page instant scan with report in 15 seconds
- JavaScript CVE detection using Retire.js and OSV database
- Third-party domain mapping with threat intelligence checking
- Security score 0-100 and A-F grade calculation
- API endpoint discovery and testing for REST, GraphQL, and SOAP
- AI-written remediation steps specific to each finding
- Subdomain discovery via certificate transparency and common names
- OWASP Top 10 coverage checklist on every report
- Compliance control mapping for NIS2, PCI DSS, and other standards
| - Device fingerprinting to recognize devices and detect headless browsers and tampering
- Multi-accounting detection starting at three accounts per visitor
- Risk scoring from 0 to 100 with signal breakdown
- Bot and AI traffic detection with browser automation signals
- IP geolocation and real IP address revelation behind masking
- Traffic quality scoring by source, channel, referrer, and UTM campaign
- Dashboard, API, and webhooks for results delivery
- Five-minute integration with JavaScript snippet or supported SDKs
|
|---|
| What makes it different | - No account required for free scans
- Audit-ready evidence packaging with compliance mappings
- Authenticated scanning via browser session capture for WebAuthn support
| - 99.9% identification accuracy and 99.9% risk signal detection accuracy across 300+ signals
- Ready-made High-Risk Event detection requires no custom fraud model training
- Explainable risk scores showing which signals fired and their weights
- Self-serve five-minute onboarding with no procurement or sales cycle required
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 16 ▲ +1 (up) since last check | 39 ▼ −1 (down) since last check |
|---|
| Trust Flow (Majestic) | 10 | 15 |
|---|
| Citation Flow (Majestic) | 29 | 37 |
|---|
| Referring domains (Majestic) | 67 | 240 |
|---|
Decloak
ShieldLabs