I built a VAPT-lite security scanner for small businesses that can't afford enterprise pentests
Most small businesses can't afford a full-scale penetration test, but that doesn't mean they're not exposed — missing SSL configs, common OWASP issues, exposed admin panels, and other basic web-facing risks are more comm
Most small businesses can't afford a full-scale penetration test, but that doesn't mean they're not exposed — missing SSL configs, common OWASP issues, exposed admin panels, and other basic web-facing risks are more common than people think.
I built Aegis (powered by GetKhojo) as a solo founder — it scans a website and checks for things like SSL/TLS issues, OWASP-related risks, and other common web vulnerabilities, then gives you a report you can actually use or hand to a client.
I ran it against my own site first to sanity-check it before showing anyone else.
You can try a free scan here: aegis.getkhojo.com
Would genuinely love feedback — especially from anyone who's done real pentesting and wants to poke holes in what I built. You can also share feedback directly at [email protected] or through GetKhojo.
If you know a small business owner who could use this, feel free to share this post.
Follow along as I build this in public:
- LinkedIn: [https://www.linkedin.com/company/getkhojo]
- X: [https://x.com/GetkhojoX26]
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.