Axeploit
Axeploit is a zero-configuration vulnerability scanner that uses autonomous AI agents to register, explore, and test APIs, web applications, and subdomains. It performs thousands of attack checks, incorporates live CVE and fuzzing intelligence, and produces verified findings with proof-of-concept reports for security teams.
Overview
9 featuresAxeploit is an Application security & vulnerability scanning project. It focuses on finding exploitable vulnerabilities in web applications, APIs, and subdomains before attackers do. It is built as a B2B product for application security teams and developers. It ships for the web.
Behind Axeploit is Axeploit. Among its 9 catalogued features are autonomous agents, web app scanning, and API scanning.
Summary written by a language model from the project’s public pages.
- Autonomous agents
- Web app scanning
- API scanning
- Subdomain scanning
- OTP verification
- CVE intelligence
- Fuzzing checks
- Exploit validation
- Security reports
Built with & integrations
- Next.js
- x-nextjs-prerender header · x-powered-by header · /_next/static/ in the HTML
- Vercel
- x-vercel-id header · x-vercel-cache header
Trust & compliance
Indexing history
10What PulseGate has recorded for this listing
- Indexed6 Sept · 00:11 UTCYour AI Agents Are One Audit Question Away From a Finding verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed5 Sept · 16:09 UTCNo CVE Is Coming for Android-Image-Cropper. Audit Anyway. verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed4 Sept · 00:13 UTCOne `__proto__` away from losing every credential in your n8n instance verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed2 Sept · 01:00 UTCCVE-2026-32193 Is a Copilot Hijack Disguised as a Boring Path Traversal verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed1 Sept · 00:29 UTCThe signature was valid and the boot was still owned verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed31 Aug · 06:31 UTCThe DoFun head unit botnet used zero exploits. The updater did the work. verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed29 Aug · 17:50 UTCYour Sent Items Folder Is a Phishing Kit Now verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed28 Aug · 16:57 UTCYour LLM's Input Filter Can't Read Ciphertext. That's the Whole Exploit. verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed26 Aug · 13:56 UTCFive of the Top Seven Agent Skills Were Malware. Your Install Flow Is the Problem. verified via DEV.to articlesSource: DEV.to articles · Open
- Indexed25 Aug · 16:53 UTCCircleCI's MCP Server RCE: Header Checks Are Not Authentication verified via DEV.to articlesSource: DEV.to articles · Open
Frequently asked questions about Axeploit
- What does Axeploit do?
- Axeploit focuses on finding exploitable vulnerabilities in web applications, APIs, and subdomains before attackers do. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who is Axeploit for?
- Axeploit is a B2B product built for application security teams and developers.
- What platforms does Axeploit run on?
- Axeploit runs on the web.
- Is Axeploit still maintained?
- Unverified. Axeploit has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
- What projects are similar to Axeploit?
- Similar projects tracked by PulseGate include unveilr-cli, Dual Condition, and REST API Static Security Testing.unveilr-cliDual ConditionREST API Static Security Testing
- Who develops Axeploit?
- Axeploit is developed by Axeploit.
Also in Application security & vulnerability scanning
Same category — not a similarity match