Vulscan Labs

What Vulscan Labs does

Vulscan Labs s.r.o. is a Prague-based cybersecurity startup that operates a passive external security scanning platform for websites. Founded in 2026 by Lukas Hruby, the company is a privately held Czech limited-liability entity with a team of 1-10 employees. It targets European SMBs, freelancers, and small agencies with a non-intrusive scanner that examines external attack indicators such as TLS configuration, HTTP security headers, WordPress and e-shop misconfigurations, exposed credentials, and GDPR-relevant exposures. Rather than performing active penetration testing, the platform executes read-only reconnaissance that lowers operational and legal overhead relative to traditional pen-test services.

The product surface is delivered as a suite of discrete scanners covering WordPress audits, e-shop audits, TLS and headers testing, a Trezor-related credential tool, a GDPR exposure check, and a continuous monitoring feature. An AI chat assistant is provided to scanner users for remediation guidance, powered by Amazon Bedrock with inference executed in EU regions to align with EU data-residency expectations. The platform is positioned around EU regulatory frameworks (GDPR, NIS2), which the company uses as both a market-selection filter and a value proposition for compliance-constrained buyers.

The company runs a product-led growth model. A free tier drives top-of-funnel acquisition, while three paid SKUs monetize: Watch at €15/month for continuous single-domain monitoring, Business at €39/month for higher limits and multi-domain coverage, and Agency at €99/month targeting freelancers and agencies with multi-tenant use and forthcoming white-label support. No external funding, named customers, or disclosed revenue figures are present in the available data; reported activity includes roughly 30,000 domains tracked and more than 5,000 scans in the most recent month, indicating early traction but limited monetization visibility.

Name

Vulscan Labs

Legal name

Vulscan Labs s.r.o.

Website

https://vulscan.app

Company type

Private

Founded year

2026

Operating status

Operating

Headcount range

1–10 employees

Short description

Vulscan Labs is a Prague-based cybersecurity startup that runs a passive external security scanning platform for websites, serving European SMBs, freelancers, and small agencies through a freemium model with paid tiers from €15 to €99 per month.

Ownership category

akta.pro rank

Product category

Website Security Scanning

NAICS

Testing Laboratories and Services (541380)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Vulnerability Assessment & Scanning (HDADAHAA)

akta.pro secondary industries

Vulnerability Management & Penetration Testing Services (BPAEADAD), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

Keywords

• Website security scanning
• Passive vulnerability scanning
• TLS security testing
• Continuous security monitoring
• Web compliance checks

Headquarters

HQ city

Prague

HQ country

Czechia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales, Others

Revenue model

1. Free one-shot passive scan: A full one-shot domain scan available on demand at no charge. Users enter a domain and receive findings immediately on-screen; they may request a PDF report by email (voluntary consent required). This drives top-of-funnel awareness and converts users to paid monitoring tiers.
2. Watch monitoring subscription: Daily website scanning with email alerts on change, monthly PDF digest, and mail security monitoring (SPF/DMARC). Billed monthly at €15 or annually at €149 (two months free). Covers 1 domain.
3. Business monitoring subscription: Daily scanning for up to 5 domains with all Watch features included. Billed monthly at €39. Targets SMBs managing multiple web properties.
4. Agency monitoring subscription: Daily scanning for up to 25 domains with all Business features plus white-label capability (coming soon). Billed monthly at €99. Targets freelancers and agencies managing client portfolios.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

Vulscan Labs operates a passive external security scanner for websites that checks TLS/HTTPS configuration, security headers, DNS settings, exposed files, WordPress hygiene, and cookies/GDPR signals without touching the customer's server. The offering is centered on a free Site Audit at vulscan.app for one-off scans, supported by specialised audit variants for WordPress sites, e-commerce shops, and TLS/headers, alongside a paid Watch continuous-monitoring subscription that delivers recurring checks, prioritised remediation guidance and an integrated AI assistant.

Product overview

Vulscan Labs offers a free, online passive security scanner accessible without signup or installation. The core offering is the Site Audit — a passive external scan performing 20+ checks across TLS/HTTPS, security headers, DNS records, exposed files, and CMS detection. Four specialized audit modules build on this foundation: WordPress Audit (15+ WP-specific checks), E-shop Audit (cookies, GDPR, payment security), TLS + Headers Test (18 deep checks for TLS and HTTP headers), and a dedicated GDPR Check. A paid continuous monitoring service called Watch (available in Watch, Business, and Agency tiers) adds daily scanning with email change alerts, DMARC report processing, and monthly PDF digests. Ancillary offerings include Trezor (a browser-encrypted credential handover tool for paid users) and an outreach program that proactively notifies Czech website operators of publicly detectable security weaknesses via one-time email alerts.

Differentiator

Problem solved

Functional benefit

Products and services

• Site Audit

Quantifiable outcome

• 89% of e-shops have an insecure session cookie
• +3 more outcomes

Segments4 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature5 records

Scale indicators8 records

Recent moves5 records

Expansion highlights5 records

Direct peers

• Mozilla Observatory: Mozilla's free online scanner performs comparable HTTP-header and TLS security checks (the same checks Vulscan's TLS+Headers test explicitly aligns with). It is the most direct free alternative in the header/grade-letter segment Vulscan competes in.
• SecurityHeaders.com: Scott Helme's free service performs a focused scan of HTTP response headers and assigns a grade — directly overlapping Vulscan's TLS + Headers Test product. Both target developers and IT staff seeking quick, actionable header remediation.
• Detectify: Swedish external attack surface and vulnerability scanning SaaS targeting web applications and SMBs. Closely comparable business model — paid continuous monitoring of external posture — but with a broader authenticated/asset-inventory scope.
• Intruder: UK-based continuous vulnerability scanning platform aimed at SMBs and MSSPs. Comparable target customer, similar self-serve/PLG pricing structure, and overlapping external-scanning value proposition.
• ImmuniWeb: Swiss-based web security testing platform offering free website security scans plus paid continuous monitoring tiers — a near-direct competitor with a similar SMB-friendly free-scan-to-paid model and European origin.
• Pentest-Tools.com: Web-based penetration testing toolkit with site-scanning capabilities (including a free lightweight scanner) targeting SMBs and pentesters. Comparable product positioning and free-to-paid conversion model.
• Probely: Portuguese web vulnerability scanner with SaaS tiers aimed at SMBs and developers — direct geographic and product overlap with Vulscan's European SMB positioning.

Broad incumbents

• Qualys SSL Labs: Industry-standard free SSL/TLS testing service providing deep certificate, protocol, and handshake analysis. Overlaps heavily with Vulscan's TLS/headers test but is part of a much broader enterprise security platform.
• UpGuard: Larger external attack surface and third-party risk management platform. Overlaps with Vulscan on external posture scoring and continuous monitoring but targets a higher enterprise/Mid-market segment.

Emerging players

• SecurityTrails: Domain and DNS intelligence platform offering historical and current DNS data, certificate transparency, and related surface intelligence. Comparable focus on externally observable domain security data — adjacent rather than directly competing.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/vulscanapp

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Vulscan Labs