🔥 Early warning for the web

See the danger before it reaches you.

Bavn is a self-serve vulnerability scanner. Add a target, prove you own it, and let our engines light the beacon on the security risks facing your web presence.

Start scanning — free See how it works

Ownership-verified scans · seven battle-tested engines · no agent to install.

Why "Bavn"?

Bavn is the old Danish word for a coastal beacon-fire — a signal lit on the highest ground to warn of approaching danger. Long before radar, a chain of these fires carried a single message across the country in minutes: danger is coming, prepare.

Bavn does exactly that for your web presence. It watches for the danger creeping toward your sites and repositories, and lights the beacon early — so you act on a vulnerability while it is still just a warning, not a breach.

“An early warning is worth more than a perfect autopsy.” — the principle behind every beacon-fire

What Bavn scans — and who it's for

For developers, security teams, and site owners who need continuous assurance without standing up their own tooling. Point Bavn at a website or a code repository and it runs a full battery of open-source scanners on isolated infrastructure.

Live web targets

Network, TLS, and application-layer scanning against your running sites and services.

Code & dependencies

Repository scans for leaked secrets and vulnerable dependencies before they ship.

Isolated by design

Scans run on a dedicated worker box with its own egress — never from your infrastructure.

Seven engines under the hood

NucleiTemplated CVE & misconfig checks

NmapPorts & service discovery

NiktoWeb server issues

OWASP ZAPDynamic app scanning

TrivyDependency vulnerabilities

testssl.shTLS & certificate audit

GitleaksLeaked secrets in code

How it works

Three steps from sign-up to findings — with proof of ownership gating every scan.

Add your target

Prove you own it

Confirm control with a one-time HTTP file or DNS record. Bavn never scans what you can't prove is yours.

Read the findings

Queue workers run the engines and stream results back — severity-ranked, deduplicated, exportable.

Light your beacon.

Create an organization, verify a target, and get your first scan running today.

Start scanning — free