Skip to content
pwnry. io
Start free
← Pwnry

From one domain to a clear testing scope.

A fictional example shows how Pwnry collects hostnames, groups likely applications and explains a price estimate.

Start your free check
Fictional example using the placeholder domain firma.de. These systems and assignments are not real investigation results.
An outside viewILLUSTRATIVE EXAMPLE
www.firma.de api.firma.de git.firma.de help.firma.de app.firma.de Website Interface Development Ticket system Customer portal firma.de
Discover hostnamesAssign systemsUnderstand the testing scope

Five hostnames become five clear tasks.

Hostname Inferred service Next step
www.firma.de Website Group with the main domain
api.firma.de API Confirm API scope
git.firma.de Development platform Confirm ownership and testing authorization
help.firma.de Ticket system Distinguish self-hosted systems from SaaS
app.firma.de Customer portal Agree roles and test accounts

Exposure is not yet a vulnerability.

A public login page or a recognized product family alone does not prove a vulnerability. The inventory provides an overview; a commissioned penetration test examines specific attack paths.