Malware Scanner
Free scans run a quick single-page security check. Authenticated plans unlock deeper multi-page crawling with higher limits.
Detection Layers
What We Scan For
Multi-stage scanner mimics Googlebot behaviour to expose threats invisible to owners.
Malware Signatures
Detects eval(), base64 injections, PHP webshells, and hex-encoded obfuscated strings common in hacked sites.
SEO Spam & Cloaking
Finds hidden casino/pharma keywords and scripts that only appear to Googlebot - the #1 hack in 2024.
Injected Scripts
Monitors for unauthorized third-party JS, hidden iframes, cryptomining scripts, and data exfiltration code.
Full Tech Fingerprint
Identifies 60+ technologies from cookies, HTTP headers, and HTML - CMS, framework, libraries, analytics, CDN, payments.
Parameter Fuzzing
Tests URL parameters that hackers use to trigger hidden content - catches conditional malware invisible on normal browsing.
Deep Multi-Page Crawl
Crawls up to 200 internal pages, not just the homepage - finds malware buried in blog posts and product pages.
Malware & Security Scanner
Scans every crawled page for PHP injections, obfuscated JavaScript, SEO spam, hidden iframes, cloaking, and parameter injection attacks - the same threats that get sites blacklisted by Google.
Technology Stack Detector
Identifies the full technology stack from HTML, HTTP headers, cookies and scripts - CMS, framework, libraries, CDNs, analytics tools and payment gateways with version numbers.
Universal Coverage
Works on WordPress.
Works on everything else too.
Unlike dedicated WP plugins, WebKernelAI scans any public website externally - no plugin install needed. Whether it's a custom CodeIgniter app, a Shopify store, or a Next.js SaaS, we detect threats the same way Google does.
Scan Protocol
How It Works
Platform Detection
Identifies CMS, framework, server stack, and all technologies using HTTP headers, cookies, and HTML fingerprints.
Deep Crawl (Plan Based)
Authenticated plans can recursively crawl multiple internal pages based on plan limits.
Dynamic Analysis
Uses a headless browser to execute JavaScript and detect runtime-only threats.
Scored Report
Delivers a security score (A-F), risk level, full tech stack, and actionable issue descriptions.
Ready to secure your
website?
Start your free security scan today. Detect malware, identify your tech stack, and get actionable recommendations - all in one comprehensive report.
WebKernelAI Growth
Create your free account to save and track results
Unlock result history, workspace tracking, and guided actions across all SEO and security tools.