We are compiling a list of free online resources that can help you scan your infrastrucutre, the list is not definitive and is here as a reference for those that may need it. The tools listed here have a free version and do not need an install file, and many of them do not require registration, those that do are labeled as such.
- ESET (Scanner)- https://www.eset.com/int/home/online-scanner/
- F-Secure (Scanner)- https://www.f-secure.com/en/home/free-tools/online-scanner
- MalwareBytes (Scanner)- https://www.malwarebytes.com/solutions/virus-scanner
- TrendMicro (Scanner)- https://www.trendmicro.com/en_us/forHome/products/housecall.html
- VirusTotal (file upload)- https://www.virustotal.com/gui/home/upload
- AWS public cloud footprint - https://recon.cloud/
- Azure/AWS/Digital ocean exposed bukets - https://grayhatwarfare.com/
- Trivy - docker image scanning - https://trivy.dev/
- Vulnerabilities is broken down into 2 sections, those are the device and the website vulnerabilities.
- SaftetyDetectives (scanner) - https://www.safetydetectives.com/vulnerability-tool/
- Find issued certificates from Lets Encrypt - https://crt.sh/
- Find Cname and other DNS entries and subdomains - https://search.censys.io/
- Domain research tool - https://dnsdumpster.com/
- ImmuniWeb - https://www.immuniweb.com/websec/
- Intruder (Registration Required) - https://www.intruder.io/
- Mozilla Observatory - https://observatory.mozilla.org/
- HostedScan https://hostedscan.com/
- Qualys SSL Labs (SSL Configuration) - https://www.ssllabs.com/ssltest/
- Quettera (Malware) https://quttera.com/
- SiteGuarding - https://www.siteguarding.com/en/sitecheck
- Snyk Website Vulnerability Scanner - https://snyk.io/website-scanner/
- Sucuri Site Check - https://sitecheck.sucuri.net/
- TermsHub (Cookie scanner) - https://termshub.io/cookie-scanner
- Pentest Tools - https://pentest-tools.com/website-vulnerability-scanning/website-scanner
- Probely (Registration required) - https://probely.com/
- ThreatAgile - https://github.com/threagile
- WPSec Wordpress Scanner - https://wpsec.com/