Decloak provides automated web security intelligence by scanning websites across multiple attack surfaces and delivering a scored, graded report in under 15 seconds. It is designed for a range of users including small businesses, compliance teams, agencies, solo builders, security teams, managed service providers, and "vibe coders." The platform identifies vulnerabilities and misconfigurations that may not be immediately visible to site owners or developers.
The tool analyzes eight distinct layers during each scan: JavaScript CVEs, hidden trackers, third-party data flows, DNS/TLS posture, subdomains, security headers, platform security for "vibe-coded" sites, and content management system (CMS) detection and checking. Decloak’s reports highlight issues such as exposed credentials in JavaScript bundles, recently registered domains involved in data flows, exposed API keys, and known vulnerabilities in libraries like jQuery. Each finding is categorized by severity—such as critical or high—and the overall security posture is summarized with a numerical score and grade.
Users can access Decloak directly through the web, with no account or payment required for the initial scan. The free scan provides results in approximately 15 seconds and includes an AI-generated summary, a breakdown of findings by layer, and references to a CVE database where applicable. The platform emphasizes ease of access, requiring only JavaScript enabled in the browser for the live scan experience.
Decloak fits within the class of web security intelligence tools, focusing on rapid, automated assessment of website vulnerabilities and configuration issues. Its free, no-signup scan makes it accessible for both technical and non-technical users seeking immediate insights into their website’s security status.
In the Security & compliance platforms space, Decloak takes a focused approach. It focuses on helping website owners and security teams quickly identify and address security vulnerabilities and misconfigurations. It is built as a B2B product for website owners and security professionals. There is a free tier. Decloak is available on the web, the command line, and embeddable surfaces.
Behind Decloak is Decloak, and the product first shipped in 2026. Key capabilities include vulnerability scanning, instant reports, and CVE detection.
Latest indexed changes and source events
Decloak Session Capture verified by the PulseGate indexer
Other apps tracked under the same category.
