Static Site AI Infra Exposure Scan

One-click scan of public DNS and headers to uncover high-severity exposures in new SaaS/AI tools

Problem

Someone ran a passive external scan on 100 newly launched SaaS/AI tools from Product Hunt and found roughly 1 in 5 had high-severity exposures discoverable in minutes from the outside (public DNS, headers). These teams usually have no security engineer and don't check before launch. The Reddit post documents this clearly.

Solution

An online scanner: enter a domain, it automatically checks public DNS records, HTTP response headers, common misconfigurations (open debug endpoints, exposed API key patterns, CORS settings), and generates a readable report with fix suggestions. Basic scan runs without login.

Users

Just-launched SaaS founders, indie developers, small AI tool teams.

MVP

Domain input and scan job queue; DNS and header checks; common high-severity detections (e.g., wildcard CORS, server version leaks, directory listing); prioritized report generation; shareable link.

Revenue

Free basic scan plus paid deep scan (with recurring monitoring and alerts), or pay-per-scan. White-label reports for agencies as an add-on.

Why now

AI tools are launching at a record pace with weak security awareness; passive scanning is technically accessible, and an indie dev can ship an MVP in days using existing libraries.