Security for SaaS companies

Legal, financial & reputational risk Secure your SaaS platform

CYBERDUR tests the security of your platform: configuration, exposed files, common injections, exposed secrets. A security incident costs you every customer's trust at once. The report you get also works, when you need it, for your enterprise customers' vendor security review.

Test my platform now

PRODUCT

Is your platform hackable?

Enter your application's address and receive a professional penetration test report with the list of weaknesses detected.

from €100 · report in hours · no scoping call · no sales meeting

PRICING

Simple, transparent pricing

One test, or a volume pack at a lower price per test. No subscription: your credits are valid for 12 months.

1 test

Check one application before a release.

100 €

100 €/test

1 test

Valid 12 months from purchase

Create an account to buy

5-test pack

One test per release, over a few months.

450 €

90 €/test −10 %

5 tests

Valid 12 months from purchase

Create an account to buy

10-test pack

Several apps, or a steady release cadence.

800 €

80 €/test −20 %

10 tests

Valid 12 months from purchase

Create an account to buy

Best value

25-test pack

Continuous deployment across several apps.

1 750 €

70 €/test −30 %

25 tests

Valid 12 months from purchase

Create an account to buy

Included in every test

✔ Automated non-destructive test
✔ No exploitation
✔ No changes to your data
✔ External black-box test
✔ No access to your code
✔ Site crawl across multiple depth levels
✔ TLS/SSL analysis
✔ Protocol analysis
✔ Cipher analysis
✔ Certificate analysis
✔ HSTS analysis
✔ Misconfiguration detection
✔ Exposed file detection
✔ XSS injection detection
✔ Error-based SQLi injection detection
✔ Local file read injection detection
✔ CORS policy check
✔ Vulnerable JavaScript libraries
✔ Secrets exposed in public code (keys, tokens)
✔ Domain email configuration (SPF, DMARC, CAA)
✔ Detailed report
✔ PDF report export
✔ Results history

One-time payment, no subscription or automatic renewal. Credits are valid for 12 months and non-refundable. Need more than 25 tests? Email us: contact@cyberdur.com

CYBERDUR TESTED

HOW IT WORKS

Three steps. A report in hours. No security team, no setup.

Point us at your app

Drop in a public URL and prove you own it: add a DNS record, or drop a text file on your site, whichever is easier for you. Nothing to install, no code to touch. Any stack works: React, Next.js, Django, Rails, no-code, whatever you ship.

https://yourapp.com

The engine goes to work

It crawls your site on its own (pages, scripts, headers, configuration), then runs a battery of non-destructive checks: TLS, misconfigurations, exposed files, common injections, CORS, JavaScript libraries and exposed secrets.

crawl · TLS · configs · injections

Get a report you can act on

Each security finding is presented with its severity. No 200-page PDF, no technical jargon, just a concise, action-oriented report that gets straight to the point. A sample test report is available.

CRITICAL → HIGH → MEDIUM → LOW

See a sample report

WHO IT'S FOR

Whatever your platform

Multi-tenant

A single misconfiguration can expose every customer's data at once.

Integrations & APIs

Every third-party connector is a potential way into your platform.

Security questionnaires

A ready-made test report to answer your prospects' vendor security reviews.

Fundraising & due diligence

Investors and enterprise customers ask for proof of security before signing.

FAQ

Questions before you start?

Short answers to what people ask most about CYBERDUR.

What is CYBERDUR?

Cyberdur is the French specialist in non-destructive automated penetration testing. You give us the address of a web application (after proving you control the domain) and our engine probes it from the outside, without touching your data: TLS configuration, misconfigurations and exposed files, common injections (XSS, SQL injection, local file read), CORS policy, vulnerable JavaScript libraries, exposed secrets and your domain's email setup. You then receive a report with every finding detected.

Is it safe to run on production?

Yes. The test is non-destructive: no exploitation, and none of your data is changed or deleted. It does send traffic to your site (page requests and harmless probes).

How long does a test take?

The test starts automatically once your domain is verified. Tests take several hours and typically finish within 3 hours, but may take longer depending on the size of the site. You get an email the moment your report is ready.

What is in the report?

A short summary, an overall severity rating, and every finding grouped by severity: Critical, High, Medium, Low. Each one has a description and the command or hint to verify it. Purely informational findings are listed separately, in an Informations section. Reports are exportable as PDF. Your previous test report history remains available in your personal dashboard.

professional penetration testing

Free test preview.

This free preview represents only 5% of a full Cyberdur test. It is strictly a passive, public check: TLS configuration, HTTP security headers, exposed technologies. No exploitation attempts, no account required.

By running this test, you confirm you are authorised to have this URL analysed. The test is limited to a single public, read-only request.

See pricing for a full test →

Sample test result

$ cyberdur check exemple.fr

✔ TLS               valid · Let's Encrypt · exp 2026-11-04
✘ CSP header         missing
✘ HSTS header        missing
! Server banner      nginx/1.21.6 (version exposed)

Overall score  D · 49/100
# free preview, not a full report

Don't let a flaw expose every customer at once

Run a free passive public check now, or pick a plan for a full test of your platform.

Free check See pricing