Decloak - Web security intelligence
Decloak scans websites for exposed secrets, configuration issues, and vulnerable libraries for teams reviewing web security.
Where to buy
2 offersPlans on AppSumo
- Pages per scan: 200
- Scans per domain per day: 10
- White-label PDF branding
- Team access and finding assignment
- Map findings to compliance controls
- API access
- Pages per scan: 200
- Scans per domain per day: 15
- White-label PDF branding
- Team access and finding assignment
- Map findings to compliance controls
- API access
- Active Security Testing (DAST)
- AI Pentesting
- API endpoint discovery/testing
- Authenticated scan mode
- Priority support
Details
- Works on
- Web app (SaaS)
- Alternative to
- Detectify, Intruder, Invicti, Pentest-Tools.com
- Best for
- Agencies, Developers, Website owners
- Integrates with
- Claude, MCP, Slack, Webhooks
- For agencies
- API access, White-label / Reseller
Why it's good
- Scan sites for exposed keys and vulnerable libraries
- Inspect up to 200 pages with a full-site AI investigation
- Map findings to security and compliance controls
- Export timestamped PDF evidence packages
Decloak provides automated web security scanning and investigation for builders and teams. A scan can report exposed API keys, leaked secrets, misconfigurations, and vulnerable JavaScript libraries. The service also describes platform-specific checks, AI investigation across a site, API endpoint discovery, active security testing, and evidence exports mapped to controls such as ISO 27001, SOC 2, NIS2, and DORA.
Features and scan limits vary by license tier. The listed tiers specify different page counts per scan and daily scans per domain, and some capabilities may depend on the selected plan. Access is lifetime with future plan updates; activate the license within 60 days. This is an early-stage product and is not covered by the marketplace’s We Got Your Back guarantee, though the marketplace refund terms apply.
