Freedom251 › Network Vulnerability Scanners
ScanTitan
What ScanTitan is
ScanTitan is a cloud-based platform for vulnerability scanning and attack-surface monitoring, with malware detection and removal. Its network scanner finds live hosts, identifies services on open ports, and checks versions against a database of more than 100,000 CVEs. Checks cover known CVEs, configuration issues, weak or default credentials, network devices, SSL/TLS, and end-of-life services. Findings include repeatable request-and-response evidence, with CVSS and EPSS used to help prioritize them. Reports are available in PDF, JSON, and HTML, and compliance exports map to PCI DSS 11.3, ISO 27001, SOC 2, and HIPAA. Integrations include Slack alerts, Jira tickets, AWS, Azure and GCP coverage, SIEM export, REST API, and JSON webhooks. A free plan is available without a credit card or trial expiry; paid plans start at $119 a year, billed yearly. ScanTitan offers web and API access, and scans only customer-specified external-facing assets.
Who it suits
It is intended for SMBs, mid-market SaaS firms, e-commerce businesses, digital agencies, and compliance-driven industries. Its external-asset focus may suit teams that want to assess internet-facing systems rather than internal infrastructure or employee devices.
What it does well
- Finds hosts and checks services against over 100,000 CVEs
- Provides reproducible evidence with CVSS and EPSS prioritization
- Exports reports as PDF, JSON, and HTML
- Free plan has no credit card requirement or trial expiry
- Includes cloud coverage and Slack, Jira, and SIEM integrations
What to know first
- Does not scan internal infrastructure or employee devices
- API access is listed for Business, Consultant, and Enterprise
- Professional costs $119 a year, billed yearly
Limits
The Free plan covers malware scanning, basic exposure scanning, basic malware monitoring, and basic uptime monitoring. Professional, the lowest-priced paid plan, lists advanced vulnerability and exposure scanning, advanced malware monitoring, and uptime, vulnerability, and exposure monitoring; it costs $119 a year, billed yearly.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | free forever · Malware scanning · Basic exposure scanning · Basic malware monitoring · Basic uptime monitoring | Free |
| Professional | billed yearly · Advanced vulnerability scanning · Advanced exposure scanning · Advanced malware monitoring · Uptime monitoring · Vulnerability monitoring · Exposure monitoring | $119 a year |
| Business | billed yearly · 360° vulnerability scanning · 360° exposure scanning · Network exposure monitoring · Brand monitoring · Vulnerability intelligence · Exploit intelligence · API access | $155 a year |
| Consultant | per concurrent website · Unlimited scans · Unlimited website add/delete · White-labeled PDF reports · API access · 360° scanning | $486 a year |
| Enterprise | custom pricing · Threat intelligence · Custom scan limits · SLA · Dedicated support · White-label reporting · API access | On request |
As scantitan.com lists them, read 15 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the ScanTitan website.
- Request the free domain scan without an account, or choose the Free plan without a credit card.
- Select a paid plan if you need its listed features; Professional is $119 a year, billed yearly.
- Use the web platform, or choose Business, Consultant, or Enterprise for listed API access.
- Specify the external-facing assets to scan.
Verdict
ScanTitan combines external network vulnerability checks with malware monitoring, integrations, and compliance-oriented reporting. Its scope is limited to customer-specified external-facing assets, and the listed paid plans start at $119 a year.
Questions
Is there a free plan?
Yes. The Free plan includes malware scanning, basic exposure scanning, basic malware monitoring, and basic uptime monitoring. It requires no credit card and has no trial expiry.
What does Professional cost?
Professional costs $119 a year, billed yearly.
Which platforms are available?
ScanTitan is available via web and API. API access is listed for Business, Consultant, and Enterprise plans.
What does the network scanner check?
It discovers live hosts, fingerprints services on open ports, and checks versions against a database of more than 100,000 CVEs. Checks also cover misconfigurations, weak or default credentials, network devices, SSL/TLS, and end-of-life services.
Does ScanTitan scan internal systems or employee devices?
No. It scans only customer-specified external-facing assets.
Who makes ScanTitan?
ScanTitan was founded in 2014 and is headquartered in The Hague, Netherlands.
Facts from ScanTitan's own pages
- API access
- The pricing page lists API access for Business, Consultant, and Enterprise plans. · scantitan.com, 3 Oct 2026
- API scanning
- The API scanner imports OpenAPI, Swagger or Postman definitions and tests REST, GraphQL, SOAP and gRPC endpoints against the OWASP API Top 10. · scantitan.com, 15 Oct 2026
- Attack-surface management
- EASM discovers subdomains, shadow IT, open ports, certificates and cloud assets, then continuously reassesses changes and new critical CVEs. · scantitan.com, 15 Oct 2026
- Cloud integrations
- The attack-surface page lists AWS, Azure, GCP, Cloudflare, Slack, Jira, Vanta, Splunk and webhooks. · scantitan.com, 15 Oct 2026
- Company focus
- LinkedIn describes ScanTitan as a cyber-exposure assessment and threat-intelligence solution for discovering and monitoring vulnerabilities on exposed systems. · ca.linkedin.com, 15 Oct 2026
- Company headquarters
- LinkedIn lists headquarters in Papendrecht, South Holland, while ScanTitan's about page gives Den Haag, Netherlands as its headquarters and Dubai as a branch office. · ca.linkedin.com, 15 Oct 2026
- Company size
- LinkedIn lists ScanTitan as a privately held IT services company with 2–10 employees. · ca.linkedin.com, 15 Oct 2026
- Confirmed findings
- The network scanner says confirmed findings include reproducible request-and-response evidence and prioritization using CVSS and EPSS. · scantitan.com, 3 Oct 2026
- Coverage
- The network scanner describes checks for known CVEs, misconfigurations, weak or default credentials, network devices, SSL/TLS, and end-of-life services. · scantitan.com, 3 Oct 2026
- Credentialed scanning
- Authenticated network scans check patches, configuration, and CIS/NIST benchmark gaps using supplied credentials. · scantitan.com, 15 Oct 2026
- Credential handling
- Credentials for authenticated scanning are described as encrypted in transit and used only during the active scan session, without retention afterward. · scantitan.com, 15 Oct 2026
- Data handling
- The company says scan findings remain in the customer account during the active plan, can be deleted on request, and are not sold or shared with third parties. · scantitan.com, 3 Oct 2026
- Data residency
- The security page says scan findings are stored on EU servers, encrypted at rest with AES-256 and transmitted with TLS 1.2 or higher. · scantitan.com, 15 Oct 2026
- Data retention
- Findings remain during an active plan, are retained for 30 days after cancellation for export, and can be deleted on request under GDPR Article 17. · scantitan.com, 15 Oct 2026
- Developer integrations
- Documented integrations include GitHub Actions, GitLab, Postman, Jira, Slack, Azure and JSON webhooks. · scantitan.com, 15 Oct 2026
- Documentation depth
- Public developer material consists mainly of curl examples, a GitHub Actions action, supported specification formats and integration descriptions rather than a separate documentation portal. · scantitan.com, 15 Oct 2026
- Founded
- LinkedIn and ScanTitan's about page both state that the company was founded in 2014. · ca.linkedin.com, 15 Oct 2026
- Free access
- The pricing page describes a free plan with no credit card and no trial expiry, and the contact page also offers a free domain scan without an account. · scantitan.com, 3 Oct 2026
- Headquarters
- The Hague, Netherlands · scantitan.com, 28 Sept 2026
- Integrations
- The network scanner lists Slack alerts, Jira ticket creation, AWS, Azure and GCP cloud coverage, SIEM export, REST API, and JSON webhooks. · scantitan.com, 3 Oct 2026
- Intended users
- The company identifies SMBs, mid-market SaaS firms, e-commerce businesses, digital agencies, and compliance-driven industries as intended customers. · scantitan.com, 3 Oct 2026
- Limit: Capterra listing
- Capterra states that no free trial and no free version are included and that pricing is contact-vendor, which differs from ScanTitan's own free plan page. · capterra.com, 15 Oct 2026
- Limit: internal scope
- The about page says ScanTitan is not suitable for internal network scanning or endpoint protection, despite the network page describing an internal connector. · scantitan.com, 15 Oct 2026
- Limit: one-site license
- Two Entrepreneur reviewers complained that their deal license allowed only one website and one site at a time. · store.entrepreneur.com, 15 Oct 2026
Where ScanTitan stands on Freedom251
- Network Vulnerability Scanners#8 of 23