We Secure Your App

Attackers now use AI Cyber Risk Reduction

CYBERDUR delivers expert cybersecurity as automated penetration testings to secure your applications

Check your app now

PRODUCT

Is your App Hackable?

Enter your domain and receive a professional penetration test report with the list of weaknesses detected.

from €100 · report in hours · no scoping call · no sales meeting

PRICING

Simple, transparent pricing

One test, or a volume pack at a lower price per test. No subscription: your credits are valid for 12 months.

1 test

Check one application before a release.

100 €

100 €/test

1 test

Valid 12 months from purchase

Create an account to buy

5-test pack

One test per release, over a few months.

450 €

90 €/test −10 %

5 tests

Valid 12 months from purchase

Create an account to buy

10-test pack

Several apps, or a steady release cadence.

800 €

80 €/test −20 %

10 tests

Valid 12 months from purchase

Create an account to buy

Best value

25-test pack

Continuous deployment across several apps.

1 750 €

70 €/test −30 %

25 tests

Valid 12 months from purchase

Create an account to buy

Included in every test

✔ Automated non-destructive test
✔ No exploitation
✔ No changes to your data
✔ External black-box test
✔ No access to your code
✔ Site crawl across multiple depth levels
✔ TLS/SSL analysis
✔ Protocol analysis
✔ Cipher analysis
✔ Certificate analysis
✔ HSTS analysis
✔ Misconfiguration detection
✔ Exposed file detection
✔ XSS injection detection
✔ Error-based SQLi injection detection
✔ Local file read injection detection
✔ CORS policy check
✔ Vulnerable JavaScript libraries
✔ Secrets exposed in public code (keys, tokens)
✔ Domain email configuration (SPF, DMARC, CAA)
✔ Detailed report
✔ PDF report export
✔ Results history

One-time payment, no subscription or automatic renewal. Credits are valid for 12 months and non-refundable. Need more than 25 tests? Email us: contact@cyberdur.com

CYBERDUR TESTED

HOW IT WORKS

Three steps. A report in hours. No security team, no setup.

Point us at your app

Drop in a public URL and prove you own it: add a DNS record, or drop a text file on your site, whichever is easier for you. Nothing to install, no code to touch. Any stack works: React, Next.js, Django, Rails, no-code, whatever you ship.

https://yourapp.com

The engine goes to work

It crawls your site on its own (pages, scripts, headers, configuration), then runs a battery of non-destructive checks: TLS, misconfigurations, exposed files, common injections, CORS, JavaScript libraries and exposed secrets.

crawl · TLS · configs · injections

Get a report you can act on

Each security finding is presented with its severity. No 200-page PDF, no technical jargon, just a concise, action-oriented report that gets straight to the point. A sample test report is available.

CRITICAL → HIGH → MEDIUM → LOW

See a sample report

WHO IT'S FOR

E-commerce, SaaS, Fintech, Healthcare

An unpatched flaw can turn into a data loss incident that can destroy your business and your reputation.

CYBERDUR for E-commerce

Customer accounts, order history, saved payment methods: your customer database is target number one for attackers.

CYBERDUR for SaaS

Your enterprise customers demand a pentest report before they sign. Pass the vendor security review without hiring a CISO.

CYBERDUR for Fintech

IBAN numbers, transactions, user identities: the smallest flaw exposes your customers to fraud, and your company to a priority regulator case.

CYBERDUR for Healthcare

Patient records, health data: the category regulators watch most closely. A data breach has serious consequences for your company's reputation.

FAQ

Questions before you start?

Short answers to what people ask most about CYBERDUR.

What is CYBERDUR?

Cyberdur is the French specialist in non-destructive automated penetration testing. You give us the address of a web application (after proving you control the domain) and our engine probes it from the outside, without touching your data: TLS configuration, misconfigurations and exposed files, common injections (XSS, SQL injection, local file read), CORS policy, vulnerable JavaScript libraries, exposed secrets and your domain's email setup. You then receive a report with every finding detected.

Is it safe to run on production?

Yes. The test is non-destructive: no exploitation, and none of your data is changed or deleted. It does send traffic to your site (page requests and harmless probes).

How long does a test take?

The test starts automatically once your domain is verified. Tests take several hours and typically finish within 3 hours, but may take longer depending on the size of the site. You get an email the moment your report is ready.

What is in the report?

A short summary, an overall severity rating, and every finding grouped by severity: Critical, High, Medium, Low. Each one has a description and the command or hint to verify it. Purely informational findings are listed separately, in an Informations section. Reports are exportable as PDF. Your previous test report history remains available in your personal dashboard.

professional penetration testing

Free test preview.

This free preview represents only 5% of a full Cyberdur test. It is strictly a passive, public check: TLS configuration, HTTP security headers, exposed technologies. No exploitation attempts, no account required.

By running this test, you confirm you are authorised to have this URL analysed. The test is limited to a single public, read-only request.

See pricing for a full test →

Sample test result

$ cyberdur check exemple.fr

✔ TLS               valid · Let's Encrypt · exp 2026-11-04
✘ CSP header         missing
✘ HSTS header        missing
! Server banner      nginx/1.21.6 (version exposed)

Overall score  D · 49/100
# free preview, not a full report

Don't Let Hackers Destroy Your Business and Your Reputation

Run a free passive public check now, or pick a plan for a full test.

Free check See pricing