Freedom251 › Vulnerability Scanning Software

Sploit.io

Free plan Web

What Sploit.io is

Sploit.io is a free web service for checking browsers for vulnerabilities and related system details. Its browser detection system identifies CVEs that a browser may be vulnerable to in real time. Custom checks can report connection information, speed, system information, geolocation, open ports, browser components, plugins, vulnerabilities, exploits, social media, Spectre, and EICAR checks. Some results rely on third-party services: GetIPIntel for proxy, VPN, or bad-IP detection; Check.Torproject.org for Tor exit-node detection; IPinfo for hostname and geolocation; and Google Maps to display location. Sploit.io says it sends IP addresses to the first three services, and IP addresses and GPS coordinates to Google Maps. Its privacy policy says test results are not collected, though access logs include the time, IP address, and user agent string. API response data expires after 12 hours, and the service records how often each API is used. Sploit.io runs in web browsers; the site says mobile platforms are not currently supported. Results may include false positives and may not always be completely accurate. Demo exploits require a visitor to press Execute and do not run automatically. The terms identify the webmasters as SPUZ.

Who it suits

Sploit.io suits people who want browser-based vulnerability checks and related information such as open ports, geolocation, or browser components. It is for web-browser use; the site says mobile platforms are not currently supported.

What it does well

Checks which CVEs a browser may be vulnerable to in real time.
Custom checks cover browser components, open ports, and vulnerabilities.
Free service for browser vulnerability scanning.
Demo exploits require a visitor to press Execute.
API response data expires after 12 hours.

What to know first

Does not currently support mobile platforms.
Test results may include false positives and may not always be accurate.
Some checks send IP addresses or GPS coordinates to third-party services.

Limits

The free service is for browser vulnerability scanning and runs on web browsers; mobile platforms are not currently supported. Test results may produce false positives and may not always be completely accurate.

Plans

Plan	Billed and limits	Price
Free service	Browser vulnerability scanning	Free

As sploit.io lists them, read 11 Oct 2026. The maker's own page has the final word.

Getting started

Open https://sploit.io/ in a web browser.
Run browser vulnerability scanning or choose from the custom checks.
If using a demo exploit, press Execute to run it.

Verdict

Choose Sploit.io for free, web-based browser vulnerability checks and its range of custom tests. Look elsewhere if you need mobile support or require results without the stated accuracy caveat.

Questions

How much does Sploit.io cost?

The Free service costs nothing.

Is there a free plan?

Yes. Sploit.io offers a free plan for browser vulnerability scanning.

Which platforms does Sploit.io support?

It supports web browsers. The site says it does not currently support mobile platforms and plans to add iOS and Android support later.

What information do its custom checks cover?

They include connection and system information, speed, geolocation, open ports, browser components, plugins, vulnerabilities, exploits, social media, Spectre, and EICAR checks.

Does Sploit.io collect test results?

Its privacy policy says it does not collect test results, apart from access logs containing the time, IP address, and user agent string. API response data expires after 12 hours.

Who operates Sploit.io?

Its terms identify the webmasters as SPUZ.

Facts from Sploit.io's own pages

API availability: The API section describes third-party APIs used by the service and says Sploit.io might provide its own API in the future. · sploit.io, 5 Oct 2026
API response storage: The privacy policy says API response data is stored with a 12-hour expiration and test initiations per API are counted. · sploit.io, 11 Oct 2026
Custom checks: Custom tests include connection, speed, system, geolocation, open ports, browser components, plugins, vulnerabilities, exploits, social media, Spectre, and EICAR checks. · sploit.io, 11 Oct 2026
CVE detection: The site says it can identify in real time which CVEs a user's browser is vulnerable to. · sploit.io, 11 Oct 2026
Data retention: The privacy policy says API response data is stored with a 12-hour expiration and that it records how often each API is used. · sploit.io, 5 Oct 2026
Data shared with APIs: The listed API requests send IP addresses, and the Google Maps entry says it receives IP and GPS coordinates. · sploit.io, 11 Oct 2026
Exploit execution: The terms say demo exploits are not executed automatically and require the visitor to press the Execute button. · sploit.io, 5 Oct 2026
Exploit safety: The terms say demo exploits are not executed automatically and require the visitor to press an Execute button. · sploit.io, 11 Oct 2026
Mobile support: The About section says mobile platforms are not supported and mentions future plans for iOS and Android support. · sploit.io, 11 Oct 2026
Operator: The terms identify the webmasters as SPUZ. · sploit.io, 11 Oct 2026
Privacy: The privacy policy says test results are not collected, except that access logs contain the time, IP address, and user agent string. · sploit.io, 11 Oct 2026
Purpose: Sploit.io describes itself as a free service for finding and alerting users to flaws and vulnerabilities in their browser. · sploit.io, 11 Oct 2026
Support: The site invites suggestions by email at [email protected] or through its linked Twitter account. · sploit.io, 5 Oct 2026
Support contact: The About section invites suggestions by email at [email protected] or through its linked Twitter account. · sploit.io, 11 Oct 2026
Test limitations: The terms say tests can produce false positives and results may not be 100% accurate. · sploit.io, 11 Oct 2026
Third-party APIs: Sploit.io lists GetIPIntel for proxy/VPN/bad-IP detection, Check.Torproject.org for Tor exit-node detection, IPinfo for hostname and geolocation, and Google Maps for displaying location. · sploit.io, 11 Oct 2026
Third-party services: Sploit.io lists GetIPIntel.net, Check.Torproject.org, IPinfo.io, and Google Maps among the APIs it uses for test results. · sploit.io, 5 Oct 2026

Where Sploit.io stands on Freedom251

Vulnerability Scanning Software#13 of 35