Codename SCNR
Two simple steps will have you ready to scan in no time.
Step 1: Install
Setup the Docker package, offering support for: Mac OSX, Linux and MS Windows.
Step 2: Acquire a license
Pick the license that works best for you. You can find the comparison table towards the bottom of the page.
For the free 30-day Trial edition, you can use the discount code "SCNR-TRIAL" to get 100% off the shown price (but only once).
Editions
| Free 30-day Trial | Community | Basic | Pro | SDLC | Enterprise | |
|---|---|---|---|---|---|---|
| Authenticated scans | Yes | No | Yes | Yes | Yes | Yes |
| Reporting | Yes | No | Yes | Yes | Yes | Yes |
| Scripting | Yes | No | Yes | Yes | Yes | Yes |
| Command line interface | Yes | Yes | Yes | Yes | Yes | Yes |
| Web user interface | Yes | No | No | Yes | No | Yes |
| REST API | Yes | No | No | No | Yes | Yes |
| Remote Agents | Yes | No | No | No | No | Yes |
| Parallel scans | Yes | Yes | Yes | Yes | Yes | Yes |
| Pages | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Target domains | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
Simply put:
- Community: CLI utilities without authenticated scans, scripting, reporting or distributed capabilities (no REST API, remote Agents, nor Scheduler).
- Basic: Community + authenticated scans + scripting + reporting.
- Pro: Basic + Web user interface.
- SDLC: Basic + REST API.
- Enterprise: Pro + SDLC + remote Agents + Scheduler.
Articles
Script your DOM XSS exploitation workflow
Hello all, I wanted to share some Codename SCNR scripting kung-fu with you. This is something you can use post-scan,...
The Arachni Chronicles
A story of curiosity, experimentation, development, million euro deal, fraudsters, abandonment and revitalization. From the inception of the F/OSS Arachni...
Continuous client-side IAST/DAST Hybrid approach for Single-Page-Applications
Some very interesting technology was presented a few days ago in the following articles: Following the data: Taint-tracing in the...
The Arachni Chronicles
A story of curiosity, experimentation, development, million euro deal, fraudsters, abandonment and revitalization.
From the inception of the F/OSS Arachni WebAppSec scanner to the opening of Ecsypno’s doors with its flagship product Codename SCNR.
Continuous client-side IAST/DAST Hybrid approach for Single-Page-Applications
Some very interesting technology was presented a few days ago in the following articles: Following the data: Taint-tracing in the...