Nothing selected yet — search above or browse below.
Browse by category
Attack-surface scan
1 Add a domain you own
2 Verify it with a DNS TXT record
3 Run the scan & share the report
🌐
Only assets you own and verify can be scanned. Checks are external and non-intrusive — no exploitation, no fuzzing.
Dependency watch
Connect a repo once — Radark reads your composer.lock, package-lock.json,
requirements.txt or go.mod and alerts on version-precise CVEs. Hands-off.
🔗
🔑
Private repos need a read-only access token (GitLab: Reporter project token; GitHub: Contents: read). Only manifest files are read — never your source. Private/internal packages are excluded automatically.