Public Web Scanning
HTML&HTML performs automated scans strictly on publicly reachable HTTP and HTTPS endpoints. We do not accept, require, or store private credentials or server access keys for free scans.
Fail-Closed Security
All private network addresses (localhost, 10.0.0.0/8, 192.168.0.0/16, 169.254.169.254) are rejected immediately at the DNS resolution layer to prevent SSRF vulnerabilities.