See your attack surface the way an attacker does.
EdgeTester is our own reconnaissance platform, built on the database we have kept for more than ten years: for every technology we have ever tested, what to look for, where it usually breaks, and what actually matters. Give it a domain and it does what the first days of every penetration test look like — automatically, repeatably, and in one report you can act on.
Request a scan- Runs from the outside, no access needed
- Non-intrusive and rate-limited
- Critical findings verified by a person
Ten years of notes, turned into a scanner.
Since our first VoIP engagements we have written down, for every technology we met, what we tested, what we found, and what turned out to be noise. Web servers, CMSs, PBXs, frameworks, cloud services, admin panels. Every engagement since has added to it. That database is what EdgeTester runs. A generic scanner matches signatures. EdgeTester checks what an experienced penetration tester would check by hand, in the order they would check it, because that is literally where the list came from.
Per technology, not per signature
For each stack we know which misconfigurations recur, which CVEs are exploited in practice and which are theoretical, and what to try next once we see it.
Updated after every engagement
Every penetration test, every free scan and every research programme we take part in feeds back into the database. It is never a snapshot.
Fewer false positives
Ten years of knowing which checks cry wolf. Findings in an EdgeTester report are the ones worth your time.
The same brain behind our manual work
EdgeTester, our AI pentest agent and our own specialists all work from the same database. The scan is the start of the same method, not a different product.
What EdgeTester does
Subdomain discovery
Finds the hosts you forgot about: staging, old portals, test systems and third-party services still pointing at your domain.
OSINT
What the internet already knows about you: leaked credentials, exposed documents, e-mail patterns and technology fingerprints.
Port & service scan
Open ports and the services behind them — including management interfaces that should never face the internet.
Known vulnerabilities (CVE)
Every detected service and version is matched against known critical, high and medium CVEs.
Endpoint discovery
Scrapes your applications for hidden paths, parameters, APIs and files that widen the attack surface.
WordPress scan (EdgePress)
Any WordPress found along the way gets a dedicated scan: core, plugins, themes, admin exposure and user enumeration.
What you get
- A prioritised report — critical, high, medium — with what to fix first
- The full map of your external attack surface, not just your main domain
- Evidence for every finding, so your team can reproduce it
- Critical findings verified by hand before they reach you
How to get it
Free scan
We run EdgeTester on your external surface and send you the three most critical findings. No obligation.
→One-off report
The full EdgeTester report with every finding verified — before a launch, an audit or a budget decision.
Monitoring
EdgeTester runs monthly or quarterly, we verify what is new, and you get a short report and a call. You notice new exposure before an attacker does.
Penetration test
Where recon ends, the manual work begins: we exploit what EdgeTester found to show the real attack path.
→Frequently asked questions
Have a question that isn't covered here? Email us at info@edgetek.dk
01 Is this a penetration test?
No. EdgeTester does reconnaissance and vulnerability identification — the first phase of a penetration test — automatically. It does not exploit anything. If you want to know how far an attacker could actually get, the next step is a manual penetration test.
02 Will it affect our systems?
No. The scan is non-intrusive: it observes, fingerprints and matches against known vulnerabilities, with light, rate-limited traffic. We never exploit findings during a scan.
03 Do you need access to our systems?
No. EdgeTester works from the outside, exactly like an attacker would. You don't need to give us any logins or access.
04 How often should we scan?
Your attack surface changes every time someone deploys, registers a subdomain or installs a plugin. Monitoring on a monthly or quarterly rhythm catches that drift; a one-off report is a good start before an audit or launch.
05 Can we run EdgeTester ourselves?
Not today. EdgeTester is the platform we use in our own engagements, and every report that leaves us has been checked by a person. If our monitoring clients want a dashboard, that is where we will build one.
06 What about WordPress specifically?
EdgePress, our WordPress scanner, runs as part of EdgeTester on every WordPress install it finds, and is also available on its own for sites built on WordPress.
Request an EdgeTester scan
Enter the domain and we'll get back to you within one business day.