Freedom251 › Web Application Security Scanners
Haxore Web Security Scanner
What Haxore Web Security Scanner is
Haxore Web Security Scanner is a cloud platform for identifying exposed assets and security risks. It monitors external subdomains, cloud storage, ports, APIs, and known CVEs. Its dark web monitoring checks hidden forums, marketplaces, and breached data dumps for leaked credentials, internal documents, and company-related discussions. Other listed checks include compromised credentials, session cookies, corporate systems, email spoofing, domain impersonation, weak SPF, DKIM, and DMARC configurations, hardcoded API keys, exposed repositories, and risks involving vendors and third-party integrations. Haxore Premium is aimed at SMBs and costs $49 a month. It includes threat surface and dark web intelligence, compromised device detection, network and CVE detection, GitHub exposure detection, API, DNS, and port-level checks, and compliance-ready reports. A separate Chrome extension, 4M Scan, provides a risk assessment in under four minutes and checks email security, ports, insecure services, GitHub leaks, sensitive exposure, breach alerts, security headers, and transport security.
Who it suits
Haxore Premium is identified for SMBs. Enterprise is aimed at CISOs, MSSPs, and organizations that need the additional listed monitoring and testing.
What it does well
- Monitors subdomains, cloud storage, ports, APIs, and CVEs.
- Checks dark web sources for leaked information.
- Includes API, DNS, and port-level checks in Premium.
- Premium includes compliance-ready reports.
- 4M Scan checks security in under four minutes.
What to know first
- No free plan.
- 4M Scan is a separate Chrome extension.
Limits
Haxore has no free plan.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Haxore Premium | For SMBs · Threat Surface Intelligence · Dark Web Intelligence · Compromised Device Detection · Network & CVE Detection · GitHub Exposure Detection · API, DNS & port-level checks · Compliance-ready reports | $49 a month |
| Haxore Enterprise | For CISOs, MSSPs, and organizations · Everything in Premium · Cloud misconfiguration · Third-party risks · Network intrusion detection · Application vulnerability scanning · 2 manual penetration tests/year · 24/7 live monitoring · Real-time threat updates | On request |
As haxore.com lists them, read 8 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Haxore website
- Review Premium pricing and Enterprise plan details
- Register an account with an email address
- Use the web platform for threat-surface and intelligence checks
- Install the 4M Scan Chrome extension for its separate risk assessment
Verdict
Haxore covers external assets, leaked information, and several types of security misconfiguration. Premium has a listed monthly price; Enterprise adds monitoring and testing, but its price is not shown.
Questions
What does Haxore monitor?
It monitors subdomains, cloud storage, ports, APIs, known CVEs, hidden forums, marketplaces, and breached data dumps.
Does Haxore detect leaked credentials?
Yes. It identifies leaked credentials, compromised credentials, session cookies, corporate systems, and exposed repositories.
How much is Premium?
Haxore Premium costs $49 a month and is intended for SMBs.
What does Enterprise add?
Enterprise adds cloud-misconfiguration checks, third-party risks, network intrusion detection, application vulnerability scanning, two manual penetration tests per year, 24/7 live monitoring, and real-time threat updates.
Which platforms are supported?
Haxore is available as a web platform and extension. The separate 4M Scan product is a Chrome extension.
Does it provide compliance reports?
Yes. Compliance-ready reports are included in the Premium plan.
Facts from Haxore Web Security Scanner's own pages
- Attack surface
- The site says Haxore monitors external assets including subdomains, cloud storage, ports, APIs, and known CVEs. · haxore.com, 8 Oct 2026
- Chrome extension
- The separate 4M Scan product is described as a Chrome extension that provides a risk assessment in under four minutes. · haxore.com, 8 Oct 2026
- Code and secrets
- Haxore says it can find hardcoded API keys, credentials, and exposed repositories. · haxore.com, 8 Oct 2026
- Credential and device detection
- The platform lists detection of compromised credentials, session cookies, and corporate systems. · haxore.com, 8 Oct 2026
- Dark web monitoring
- Haxore says it monitors hidden forums, marketplaces, and breached data dumps for leaked credentials, internal documents, and company-related discussions. · haxore.com, 8 Oct 2026
- Email and domain security
- Listed checks include email spoofing, domain impersonation, and weak SPF, DKIM, and DMARC configurations. · haxore.com, 8 Oct 2026
- Enterprise coverage
- Enterprise includes two manual penetration tests per year, 24/7 live monitoring, and real-time threat updates, according to the pricing page. · haxore.com, 8 Oct 2026
- Extension checks
- 4M Scan lists checks for email security, network ports, insecure services, GitHub leaks, sensitive exposure, breach alerts, security headers, and transport security. · haxore.com, 8 Oct 2026
- Headquarters
- 17350 State Hwy 249, Ste 220 #27518, Houston, Texas 77064, United States · haxore.com, 28 Sept 2026
- Intended users
- The pricing page identifies Premium as for SMBs and Enterprise as for CISOs, MSSPs, and organizations. · haxore.com, 8 Oct 2026
- Privacy
- Haxore’s privacy policy says registration collects an email address and that it uses encryption of sensitive data and regular security infrastructure monitoring and updates. · haxore.com, 8 Oct 2026
- Product
- Haxore describes itself as an attack surface and threat intelligence platform for identifying hidden vulnerabilities, exposed assets, leaked credentials, and misconfigurations. · haxore.com, 8 Oct 2026
- Reports
- The pricing page describes developer-friendly reports and lists compliance-ready reports in the Premium plan. · haxore.com, 8 Oct 2026
- Support
- The privacy policy says the company uses account email to provide customer support and resolve reported issues; its contact page lists [email protected]. · haxore.com, 8 Oct 2026
- Vendor risks
- The site lists monitoring vendors and third-party integrations for security risks, leaked credentials, and misconfigurations. · haxore.com, 8 Oct 2026
Where Haxore Web Security Scanner stands on Freedom251
- Web Application Security Scanners#22 of 29