Before scanning
Use targets you own or are authorized to test.
TargetHunt is built for legitimate security validation and keeps manual scans inside domain-bound project scope.
- Owned domains
- Authorized assessments
- Project scope rules
Start scan
Launch a bounded external scan from one target domain.
Create a workspace, enter a URL, and TargetHunt will attach it to the right project before dispatching a controlled scan.
targethunt scan https://example.com
Input
URL
Scope
Domain
Output
Report
Live control surface
Create or use workspace
Resolve project scope
Queue scan safely
During scanning
The runtime favors bounded proof.
Specialist engines are time-limited and raw requests, responses, tokens, and secret values are kept out of persisted evidence.
- Safe persistence
- Timeout controls
- Tool status visibility
After scanning
Review a report that a team can act on.
Findings are grouped with severity, affected URLs, evidence, standards mapping, and remediation guidance.
- Dashboard report
- PDF export
- Email notification
Operator notes
The first scan should be simple.
The dashboard starts target-first: type a domain or URL, click scan, and let TargetHunt handle project attachment and scan dispatch.
Default project support
Workspace-aware scans
Email verification requirement
Plan-aware limits
Create your scan workspace.
Account creation takes you straight to the dashboard where you can enter the first target.