FREEDOM251

Freedom251 › Web Application Security Scanners

VAddy

Free trial APILinuxMacSelf-hostedWeb

Visit VAddy Alternatives Pricing

VAddy's own site

What VAddy is

VAddy is a cloud service for automated black-box security testing of web applications. It checks listed vulnerability types such as SQL injection, cross-site scripting, remote file inclusion, command injection, and directory traversal. Scans can cover URL path parameters, authenticated applications, SSL sites, CSRF-token forms, REST APIs with JSON parameters, intranets, and multi-FQDN applications. VAddy can run after code changes in a continuous integration process and alert when a commit contains vulnerabilities. Listed integrations include Jenkins, CircleCI, Codeship, Travis CI, and Wercker, along with a Web API, Ruby client, and Go API command tool. Plans allow unlimited scans, with per-scan limits of two, five, or eight hours and concurrency limits of one or three scans. Professional costs ¥19,800 a month, Enterprise 59800.00 JPY, and Advanced 99800.00 JPY. New accounts receive Professional-equivalent features for seven days.

Who it suits

VAddy suits development and QA teams, security testers, and organizations scanning web applications or APIs in cloud, local, or intranet environments.

What it does well

  • Checks several listed web vulnerability types
  • Supports authenticated applications and REST APIs
  • Integrates with named CI services
  • Offers local-environment scanning
  • Includes PDF report export and human support

What to know first

  • No free plan
  • Seven-day trial ends with suspension until upgrade
  • Per-scan time and concurrency caps apply
  • Three-asset limit is listed

Limits

All plans allow unlimited scan counts, but each scan is capped at two, five, or eight hours and concurrency at one or three scans. The seven-day trial ends with temporary account suspension until an upgrade.

Plans

PlanBilled and limitsPrice
Professional¥19,800 monthly (tax excluded); ¥198,000 annually (tax excluded) · 5 inspection items · 2 hours per scan · 1 concurrent scan · 3 FQDNs¥19,800 a month
Enterprise¥59,800 monthly (tax excluded); ¥598,000 annually (tax excluded) · 11 inspection items · 5 hours per scan · 3 concurrent scans · 3 FQDNs · 30 organization members¥59,800 a month
Advanced¥99,800 monthly (tax excluded); ¥998,000 annually (tax excluded) · 18 inspection items · 8 hours per scan · 3 concurrent scans · 3 FQDNs · 30 organization members¥99,800 a month

As vaddy.net lists them, read 3 Oct 2026. The maker's own page has the final word.

Getting started

  1. Open the VAddy website
  2. Create a new account
  3. Use the seven-day Professional-equivalent trial
  4. Connect VAddy with a listed CI integration or its Web API
  5. Configure web, authenticated, SSL, intranet, or REST API targets
  6. Run scans in the local or cloud environment

Verdict

VAddy combines automated application scanning with CI integrations, authenticated targets, and API coverage. Its paid plans, scan caps, and seven-day trial should be reviewed against your testing schedule and budget.

Questions

How much does VAddy cost?

Professional is ¥19,800 a month, Enterprise is ¥59,800 a month, and Advanced is ¥99,800 a month.

Is there a free plan?

No. New accounts receive Professional-equivalent features free for seven days.

What platforms does VAddy support?

Its listed platforms are API, Linux, macOS, self-hosted, and web.

Which integrations are listed?

Jenkins, CircleCI, Codeship, Travis CI, Wercker, a Web API, a Ruby client, and a Go API command tool.

Where is customer data stored?

VAddy uses AWS and stores customer data in a data center in Japan.

Facts from VAddy's own pages

Compliance
Bitforest says it has ISO 27001 and ISO 27017 certifications, and lists Tokyo as its headquarters. · bitforest.jp, 3 Oct 2026
Data handling
The maker says it accesses crawl and vulnerability-identifying data only with prior customer permission and automatically deletes data no longer accessible under the current plan. · vaddy.net, 3 Oct 2026
Headquarters
Tokyo, Japan · vaddy.net, 28 Sept 2026
Hosting and data
The security page says VAddy uses AWS and stores customer data in a data center in Japan. · vaddy.net, 3 Oct 2026
Integrations
The maker lists Jenkins, CircleCI, Codeship, Travis CI, Wercker, a Web API, a Ruby client, and a Go API command tool. · vaddy.net, 3 Oct 2026
Intended users
The plan page describes Enterprise as suited to development and QA teams and Advanced as for users needing a vulnerability assessment standard aligned with IPA guidance. · vaddy.net, 3 Oct 2026
Local scanning
The plan page lists local-environment scanning as a basic feature. · vaddy.net, 3 Oct 2026
Purpose
VAddy is a cloud-based service for automated black-box security testing of web applications. · vaddy.net, 3 Oct 2026
Scan limits
The plans list unlimited scan counts, with per-scan time caps of 8, 5, or 2 hours and concurrency caps of 3, 3, or 1 respectively. · vaddy.net, 3 Oct 2026
Support
The plan page includes free human support and PDF report export. · vaddy.net, 3 Oct 2026
Targets
It tests URL path parameters, authenticated web applications, SSL sites, CSRF-token forms, and REST APIs including JSON parameters. · vaddy.net, 3 Oct 2026
Trial
New accounts can use Professional-equivalent features free for one week, after which the account is temporarily suspended until upgraded. · vaddy.net, 3 Oct 2026
Vulnerability coverage
Its listed tests include SQL injection, XSS, remote file inclusion, command injection, and directory traversal. · vaddy.net, 3 Oct 2026
Workflow
The home page says VAddy can run in an existing CI process after code changes and alert when a commit contains vulnerabilities. · vaddy.net, 3 Oct 2026

Where VAddy stands on Freedom251

Look at these too