LarkaUZ_

These are some really good suggestions... Thanks for your help.

Well this is a paid service... This is not a sign up page onlt. If we follow your logic any service that require card details can't be submitted to HN.

I understand your concern. And clearly we should have communicated better, but having the link flagged while it is on the HN homepage for our launch seems a little bit excessive.

I assure you this is a real launch... This is indeed a one page website, but the service we provide requires only that for the moment. Once the user subscribe, he will start receiving the scan reports on his mail box...

It is not. Users subscribe and they receive a mail informing them that the Scan will be launched shortly. Once the scan is over the user receive the scan report on his mailbox. This is the service we provide...

Thanks. I really have no idea why it was flagged ... I will try to add an anonymized report.

> Most other businesses offer a free scan (or partial scan), so you can get an idea of what is provided. >Most other businesss show sample reports, so you can get an idea of what is provided.

This is clearly something that we will add. Thanks for the suggestions.

As for the rest of your comment, you raise valid criticism from a technical point a view. This is our launch and we did it on hacker news to collect feedbacks. However the website is designed to target small business or mom-and-pop shops that do not have the technical shops to understand the nitty-gritty security details.

We will try to find a way to give more information about how we do our scans whithout overwhelming a non-techincal reader.

We aggregate data from multiple web vulnerability scanners, and provide a unified and simplified report about the vulnerabilities detected.

Thanks for the suggestion. We will try to fix that soon...

Hi. Indeed we did not write a vulnerability scanner from scratch. We run a few major vulnerability scanners like OpenVAS on the target website, configured in a way to be non-intrusive. We do not communicate on the exact tools that we launch and how we compile the results since this is our secret sauce ...

Fair point about the "GET /article/delete/1" issue, unfortunately a lot of SMB do not have staging/test instances ...

Hi. I'm the founder of ScannerSec. We run Vunlerabilty scanners : Infrastructure and Web applications. It starts with a port scan, and then it tries to detect vunlerabilities ( CVE and others). It is like as a simplified version of Nessus or OpenVAS.

Thanks! I fixed it.