Description
Decloak is a web security intelligence platform designed to provide comprehensive security assessments for websites. It offers a free 15-second security scan that requires no account and generates a public URL report. This report includes a detailed checklist mapping each OWASP Top 10:2025 category, ensuring that users can cite coverage against industry standards.
Read More
The platform's capabilities extend beyond basic scanning. Decloak employs AI agents for in-depth investigations, authenticated pentesting, and compliance-ready evidence for standards such as SOC 2, ISO 27001, NIS2, DORA, LGPD, PCI DSS, NIST CSF, and EU CRA. These features are available through various pricing tiers, from free individual page checks to comprehensive enterprise solutions.
Decloak's enterprise scans include active security testing with safe, non-destructive probes, such as forced browsing, CORS checks, and postMessage handler auditing. The platform also offers a glanceable, color-coded report card for security scores, findings by severity, DNS/TLS posture, and compliance coverage.
The platform supports programmatic scan triggering via a REST API and integrates with AI agents like Claude and Cursor. Decloak also provides a chat widget for real-time assistance, which becomes a full LLM-backed assistant on paid plans.
Decloak's AI Pentesting feature, exclusive to the Enterprise tier, confirms exploitability using tools like sqlmap and dalfox. This feature provides a dedicated Pentest Score and a standalone report, ensuring that confirmed exploits are clearly documented.
Overall, Decloak is designed for developers, security professionals, and organizations seeking robust web security solutions. Its combination of AI-driven analysis, comprehensive reporting, and compliance mapping makes it a valuable tool for maintaining and improving web security.
- CategoryAI Cybersecurity Tools
- Pricing ModelFreemium
- DeploymentCloud
- PlatformsWeb
Decloak's Core Features
Free 15-second security scan
AI-guided investigations
Authenticated pentesting
Compliance-ready evidence
OWASP Top 10:2025 checklist
Active security testing
Programmatic scan triggering
AI Pentesting with exploitation confirmation
How to use Decloak?
Start: Paste any URL for a free scan
Review: Analyze the 15-second report
Upgrade: Choose a paid plan for deeper insights
Investigate: Use AI agents for comprehensive analysis
Pentest: Confirm exploitability with AI Pentesting
Share: Distribute reports with public URLs
Integrate: Use API for programmatic scans
Optimize: Utilize compliance mapping for audits
Decloak's Use Cases
- Quick Security Scan
- In-Depth Investigation
- Compliance Reporting
- Exploit Confirmation
- Programmatic Scanning
