Analyze Your Site

  1. Vulnerability Scanner
  2. Identify servers and software
  3. Detect XSS vulnerabilities
Visibility:
Scan method:
[scan_method]
Some firewalls blocks Nikto. For get true positive results add nikto.online IP addresses (172.96.166.66-172.96.166.70 or CIDR 172.96.166.64/29) to the whitelist

Recent scan history

Site address Scan method Site IP Duration Size Reported
pornv.xxx Nikto scan (max 60 sec) 185.213.89.40 61s 1.45 KB 5 item(s)
kccug.com Nikto scan (max 60 sec) 74.208.81.187 61s 1.74 KB 8 item(s)
kccug.com Nikto scan (max 60 sec) 74.208.81.187 61s 1.74 KB 8 item(s)
evopay.cash Nikto scan (max 60 sec) 172.67.198.253 61s 2.03 KB 8 item(s)
hiretailmart.biz Nikto scan (max 60 sec) 103.125.217.95 61s 1.63 KB 8 item(s)
hiretailmart.biz Nikto scan (max 60 sec) 103.125.217.95 61s 1.63 KB 8 item(s)
ooredoo.tn Nikto scan (max 60 sec) 154.72.227.22 61s 1.41 KB 5 item(s)
solmii.com Nikto scan (max 60 sec) 23.227.38.32 61s 1.77 KB 7 item(s)
www.historicalpoint.com Nikto scan (max 60 sec) 145.223.124.217 22s 2.18 KB 10 item(s)
172.236.149.91 Nikto scan (max 60 sec) 172.236.149.91 23s 1.04 KB 3 item(s)

All the Features

Discover a comprehensive platform designed for ultimate flexibility and security. Packed with premium features, this solution empowers your team to tackle vulnerabilities efficiently while enhancing customer communication.

Accessible on Any Device

Dedicated Customer Support

Domain subversion detect

Protocol check

Sensitive file check

Sensitive info check

Misconfig detect

Test page scan

CSRF token check

SSL cert validation

Server obfuscation

HTTP methods test

Banner grab

No Installation Required

Effortless Scalability

Intuitive Dashboard

Seamless API Integrations

Redirect handling

XSS detect

Response handle

Error detect

Error log check

Robots.txt parse

HTTP options scan

Insecure HTTP headers

Config check

Vulnerability scan

Outdated server check

Risky file detection

Information Disclosure

Server software scan

SSL check

Web server ID

Server version ID

Framework check

Language path scan

CVE monitor

Temp file detect

Backup file check

Default file check

Directory traversal check

Full scan coverage

SSL/TLS check

Cookies check

Nikto Online

Why nikto.online?

With Nikto Online Scanner, you can swiftly assess the security of your web servers. 

Web-Based Operation

Perform all tasks directly from the web interface. No need for complex setups or installations. Simply access our platform online and conduct security checks conveniently from any device with internet access.

Intuitive Interface

Run Nikto security scanner tool without needing to know any commands. Our user-friendly interface allows you to initiate scans effortlessly, even without extensive technical knowledge.

Latest Updates

Stay ahead of emerging threats by checking security with the latest updates. Our platform ensures that you are equipped with the most up-to-date vulnerability signatures and detection techniques, enhancing the effectiveness of your security assessments.

Useful Links

  • Online SQL injection tool (sqlmap.online)
  • Online Port scanner (portscanner.online)
  • Simulate DDoS Attack Online (ddosattack.online)
  • Online Wordpress Security Scanner (wpscan.online)

Latest Cybersecurity News & Insights

Explore recent news, in-depth articles, and expert analysis on vulnerability scanning, penetration testing, and emerging attacks.

Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges

Google on Monday warned that threat actors are hijacking enterprise access to Large Language ...

Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

Fixed kernels for a use-after-free vulnerability in the Linux kernel's IPv4 TCP ...

Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw

Synology is urging customers to update the DiskStation Manager (DSM) software powering its ...

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come ...

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability ...

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware ...

Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, ...

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical flaws in Langflow could let a remote attacker with no account bypass ...

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN ...