Agentless AI web security scanner plus VPS monitoring for founders and developers.
Homepage hero
1 / 3Overview
What is Orb44?
Agentless AI web security scanner & VPS monitoring.
Orb44 is an agentless AI web security scanner combined with VPS monitoring, built for founders and developers who want to see their site the way an attacker does. Unlike complex enterprise tools, it scans with zero logs and no root access, delivering results in minutes.
The external scanner uncovers public-facing vulnerabilities, misconfigurations, and data leaks such as open admin panels, leaked credentials, blocklist hits, and checkout tampering. An optional Satellite agent installs with a single command and runs as a standard user to monitor internal server risks, including port bindings, CPU and RAM usage, and firewall/fail2ban/SSH configuration.
What sets Orb44 apart is its hybrid approach: instead of dumping generic alerts, its AI explains each finding in plain language with concrete three-step remediation guidance, and human cybersecurity experts are available to help fix vulnerabilities hands-on. Continuous 24/7 monitoring tracks CDN, certificate, and checkout configuration drift, automatically accelerates scan frequency when critical issues go unresolved, and sends instant Telegram or Slack alerts. It also monitors domain reputation on Google Safe Browsing and Spamhaus.
Pricing is freemium: a free forever plan covers one domain with basic external scans, Telegram/Slack alerts, and uptime checks every 5 minutes. Paid plans ($15/week, $45/month, $120/month) add deep audits, AI remediation reports, PDF export, Satellite agents, team seats, and SIEM/webhook integrations.
Platforms and languages
Orb44 Availability
Platforms
Languages
Capabilities
Orb44 Key Features
External attack surface scanning
Scans your domain to uncover public-facing vulnerabilities, misconfigurations, and data leaks such as open admin panels, leaked credentials, blocklist hits, and checkout tampering. Results in about 5 minutes with zero installation.
Satellite host monitoring
Optional agent installed on your VPS with a single command. Monitors internal port bindings, CPU/RAM usage, and firewall/fail2ban/SSH security configuration as a standard user, without root access.
AI-driven remediation guidance
AI translates scan findings into plain language and provides concrete three-step fix instructions. Human cybersecurity experts are also available to help fix vulnerabilities hands-on.
Continuous monitoring and drift detection
24/7 tracking of CDN, certificate, and checkout configuration drift between snapshots. Scan frequency automatically accelerates when critical vulnerabilities remain unresolved.
Instant Telegram and Slack alerts
Get notified through Telegram or Slack the moment new threats or configuration changes are detected.
Verified findings only
Findings are strictly categorized as fingerprints, candidates, or confirmed vulnerabilities, reporting actual impact rather than speculative CVE noise.
Domain reputation monitoring
Tracks your domain on Google Safe Browsing and Spamhaus to catch reputation problems early.
Best for
Who uses Orb44?
Founders and website owners
see what their domain exposes to the internet and get step-by-step AI remediation
Sysadmins and infrastructure teams
monitor VPS internals such as ports, CPU/RAM, SSH, and firewall alongside external scans
Digital agencies and development teams
get standardized, explainable vulnerability reports and automated monitoring across client sites
Plans and access
Orb44 Pricing
Freemium
Free forever plan ($0, 1 domain). Paid plans: $15/week, $45/month, $120/month. Billed in USD via Stripe.
Common questions
Orb44 FAQs
Is Orb44 free to use?
Yes. There is a free forever plan covering 1 domain with basic external scans, HTTPS certificate validation, Telegram/Slack alerts, and uptime checks every 5 minutes. Paid tiers are $15/week, $45/month, and $120/month; paid plans auto-renew until canceled and are billed in USD via Stripe.
Do I need to install any software?
No. The core external scan is 100% agentless with zero installation. The optional Satellite agent needs just one command on your VPS and runs as a standard user without root access.
Is this a penetration test?
No. Orb44 performs read-only external exposure scans and never exploits vulnerabilities or attempts authentication. Results are not formal PCI QSA or ISO 27001 compliance audit reports.
How is my data protected?
The Satellite agent only sends inbound telemetry to the dashboard. The @orb44/cli npm package is signed with Cosign keyless signatures, and payments are processed securely through Stripe, which stores your card details.
Which websites can I scan?
Any publicly accessible domain. For managed platforms like Shopify, Orb44 defaults to agentless external scanning. It is not suitable for offline, air-gapped intranets.
Reviews
See what the community thinks and share your experience.
—
Based on 0 ratings
Rating distribution
Community reviews
No reviews
No written reviews yet.
