About us
Scanfull is a venture of Smart Data Invest, Lab & Ventures — a data and artificial-intelligence business group. We started from a simple observation: AI now writes software faster than people can review its security.
What we do
We open your live app like any visitor would, find what was left exposed, prove every flaw with evidence, and hand you the fix prompt ready for your coding assistant. Then we come back to confirm the fix landed.
How we handle what we find
Any secret we detect is masked before anything is stored — what stays in the database is a partial version and a hash, never the real value. This is a product rule, enforced by an automated test and by a constraint in the database itself.
Only what is yours, or authorized
The surface analysis is what any visitor can see. The tests that truly interact with the system — like reading database tables — only run after you prove you own the domain. Scanning a third party's system without authorization is something we do not do, even when asked.
Responsible disclosure
When we notify someone about a flaw in their app, we tell them it exists — we never publish where. The detail is only released to whoever proves they own the domain. That is how a security notice protects instead of exposing.
Talk to us
Support and questions: help@scanfull.dev