SmartScanner 2.6 Released

By SmartScanner

We’re rolling out SmartScanner 2.6, bringing deeper visibility into your scans, improved crawling control, and expanded detection for modern web security risks.

This release focuses on better scan insight, more precise crawling behavior, and new vulnerability coverage, especially around SSRF and cloud environments.

🚀 What’s New

📊 Better Visibility into Scans

Understanding what your scan actually covered is just as important as the findings themselves.

  • Crawl Coverage Details: Reports now include detailed insights into discovered vs. scanned URLs.
  • URL Inventory Export (CSV): Export all discovered endpoints for auditing, filtering, or external analysis.

🛡️ New Security Tests

We’ve expanded detection capabilities to cover increasingly common attack vectors:

  • SSRF via Host Header
  • Possible SSRF (Heuristic Detection)
  • Unvalidated Redirect via Host Header
  • Cloud Metadata Disclosure

These additions help identify misconfigurations that are often overlooked but can lead to serious impact in cloud and proxy-based environments.

🔧 Improved Crawling Control

Crawling behavior has been redesigned to be more flexible and predictable.

The old --no-crawl option has been removed and replaced with more granular controls:

  • --no-discovery → No crawling at all
  • --no-follow → Only scan input URLs (no link following)
  • --crawl-depth → Full control over how deep the scan goes

This change allows you to better tailor scans for:

  • Quick surface checks
  • Controlled testing environments
  • Deep application analysis

If you previously relied on –no-crawl, you can refer to our guide on How to Test for React2Shell with SmartScanner, where a no-discovery style scan is used in practice.

🔄 Detection & Engine Updates

We’ve updated multiple technology detection rules to keep scans accurate:

  • Nginx
  • OpenSSL
  • Apache Tomcat
  • WordPress

Additionally, internal components have been refactored to improve performance and maintainability.

🐛 Fixes

  • Fixed an issue where the Fingerprint detection test was not executed in default scan configurations.
  • General stability improvements across the scanning engine.

⬇️ Get Started

SmartScanner 2.6 is available now.

If you’re already using SmartScanner, updating will immediately improve scan accuracy and give you better insight into coverage.

If you rely on automated scans or CLI workflows, this release is especially relevant, as the new crawling controls give you much finer control over scan behavior.

📥 Download SmartScanner 2.6 today.