nanotesting.com valid

NANOTESTING

Last updated: 2026-07-28

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-26T12:11:23.148Z. Cached copy · Source on nanotesting.com

# NANOTESTING

> Last updated: 2026-07-28
>
> Automated security assessment and vulnerability scanning SaaS.
> One platform for every surface attackers touch: web application
> security testing, API security testing, GitHub repository
> scanning (SAST + dependency + secrets), mobile app security
> testing (Android APK / iOS IPA), cloud security posture (AWS /
> Azure / GCP CIS audits), Kubernetes security, smart contract
> auditing (7 EVM chains + Sui Move beta + Solana beta), and DApp
> frontend analysis. Non-invasive baseline by default; an optional
> Invasive Testing add-on adds active DAST (OWASP ZAP active scan,
> OpenAPI fuzzing, mass-assignment, Host-header injection) on
> identity-verified, owner-authorized targets. A pre-pentest
> baseline that catches the obvious gaps before a human reviewer
> spends their hours on the business-logic bugs only humans find.

NANOTESTING is at https://nanotesting.com. Hosted multi-tenant
scanner, not a desktop tool. Customers verify a target (DNS TXT,
HTML file, meta tag, or domain email), pick a plan, and run scans
either on demand or on a weekly / monthly schedule. Results land
in the dashboard, can be exported to CSV / JSON / auditor-ready
PDF, and can fire a Slack / Discord / generic webhook on critical
findings.

## Recent changes

Major capabilities shipped in the last few months:

- Invasive Testing add-on ($299/mo): opt-in active DAST that sends
  real attack payloads - OWASP ZAP active scan (SQLi, XSS, SSRF,
  path traversal, command injection, SSTI, XXE), Schemathesis
  OpenAPI fuzzing, mass-assignment probe (CWE-915), and a new
  Host-header injection probe (CWE-644). Three-gate safety:
  approved KYC/KYB identity + active add-on + explicit per-target
  authorization. See the dedicated section below.
- Invasive testing for mobile apps: extracts the backend API hosts
  hardcoded in a decompiled APK / IPA and runs the active checks
  against the ones the customer has verified ownership of (third-
  party / partner hosts are reported, never attacked).
- KYC / KYB identity verification is now a hard gate for the
  Invasive Testing add-on (previously a soft reminder banner only).
- Sui Move + Solana baseline scanners (both Beta).
- DApp frontend Web3 scanner: wallet provider detection, RPC API
  key leak detection (sha256 fingerprint only; raw key never
  stored), source map exposure, unlimited-approve pattern check.
- Per-EVM-chain detector battery: Oracle config (Chainlink stale
  price / decimals / centralized feed), ERC compliance
  (ERC-20 / 721 / 1155 conformance), Compiler version audit
  (unverified source, outdated solc, optimizer flags, non-canonical
  EVM version).
- Mobile FP suppression architecture: AndroidX carve-out, launcher
  activity exemption, apktool original-manifest dedup, test-fixture
  filter.
- Web FP suppression architecture: host calibration probe + managed
  -host downgrade + anti-bot threshold + FP-risk caveats.
- Compliance evidence pipeline: compliance_evidence table
…

Related sites

Explore similar publishers →

Similar publisher descriptions and documentation. Similarity does not imply affiliation or equivalent capabilities.

Machine-readable: GET /v1/resolve?q=nanotesting.com · GET /v1/domain/nanotesting.com · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for nanotesting.com:
1. POST https://agentwebmap.com/v1/sites/nanotesting.com/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://nanotesting.com/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/nanotesting.com/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/nanotesting.com).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.