Early warning for your websites, code and office network

See the danger before it reaches you.

Bavn is a self-serve vulnerability scanner. Add a website, a code repository or an office network, prove it is yours, and Bavn lights the beacon when it finds something that needs you.

Start scanning — free See how it works

Ownership-verified scans · nine open-source engines · nothing to install, except a small agent for office networks.

Why "Bavn"?

Bavn is the old Danish word for a coastal beacon-fire — a signal lit on the highest ground to warn of approaching danger. Long before radar, a chain of these fires carried a single message across the country in minutes: danger is coming, prepare.

Bavn does exactly that for your websites, code and office network. It watches for the danger creeping toward them and lights the beacon early, so you act on a vulnerability while it is still a warning, not a breach.

“An early warning is worth more than a perfect autopsy.” — the principle behind every beacon-fire

What Bavn scans — and who it's for

For developers, IT teams and site owners who need continuous assurance without standing up their own tooling. Point Bavn at a website, a code repository or an office network range, and it runs a full battery of open-source scanners against it.

Websites and servers

Ports, TLS and application-layer scanning against your running sites and services.

Code & dependencies

Repository scans for leaked secrets, vulnerable dependencies and known CVEs in your software bill of materials.

Office networks

A small agent inside your network sweeps its range for exposed services and outdated software, and tells you when a new device appears.

Isolated by design

Website and repository scans run on a dedicated worker box with its own egress. The network agent only makes outbound connections.

Nine open-source engines under the hood

NucleiTemplated CVE & misconfig checks

NmapPorts & service discovery

NiktoWeb server issues

OWASP ZAPDynamic app scanning

TrivyDependency vulnerabilities

testssl.shTLS & certificate audit

GitleaksLeaked secrets in code

SyftSoftware bill of materials

GrypeKnown CVEs in that inventory

On office networks, the Bavn agent runs Nmap from inside the network.

How it works

Three steps from sign-up to findings — with proof of ownership gating every scan.

Add your target

A website, a code repository or an office network range, under your organization.

Prove you own it

An HTTP file or DNS TXT record for a website, read access for a repository, or an agent you run inside the network. Bavn never scans what you can't prove is yours.

Scan, and hear about it

Scan now or daily, weekly or monthly. Findings arrive severity-ranked and deduplicated, and Bavn emails you when a scan finds something new that is critical or high.

Light your beacon.

Create an organization, verify a target, and get your first scan running today.

Start scanning — free