Flagship product · Active Development
BugPartner
An AI-assisted attack surface intelligence platform. BugPartner runs passive and active discovery across multiple intelligence providers, removes false positives, validates what's left, and turns findings into professional reports — with AI assistance and optional local models.
Free · bring your own keys
BugPartner needs API keys and an AI model to run. On the free tier you add your own — all providers below have free tiers, or run models fully offline with Ollama.
Pro · managed for you
Don't want to wire up keys? Pro provides managed AI and premium providers and unlocks the advanced engines — nothing to configure. See plans.
Pipeline
Explore the engines
Discovery
Inside BugPartner
A large, modular platform — grouped by area. Tiers show what's free versus Pro.
Recon & Discovery
Free- ·Passive + active recon core
- ·Subdomain discovery & takeover
- ·Certificate transparency
- ·DNS intelligence
- ·Asset graph / correlation
OSINT & Intel
Free- ·Email & username intel
- ·Google dork generator
- ·Favicon & tech fingerprint
- ·Git & secret leaks
- ·IP / ASN / cloud intel
Security Analyzers
Mixed- ·Access control / IDOR
- ·CORS, cookies, headers, JWT
- ·Request smuggling & XS-Leak
- ·403 bypass, sensitive paths
- ·Business-logic fuzzer
- ·gRPC & modern-threat analysis
- ·LLM/AI security checks
Decision Engine
Pro- ·Evidence-quality scoring
- ·Priority & gain estimation
- ·Recommendations + explainability
- ·False-positive suppression
AI & Agents
Mixed- ·Adaptive planner agent
- ·Per-domain analyzer agents
- ·Autopilot & workflow manager
- ·Multi-provider + local LLM
Vektor (HTTP/identity)
Pro- ·Session & identity store
- ·Request diff engine
- ·Attack-chain board
Integrations
Free- ·Provider Manager (30+ sources)
- ·MCP server
- ·Professional reports
- ·Telegram alerts
Bundled tooling
BugPartner orchestrates best-in-class open-source scanners under one pipeline.
BYOK providers
Free-tier sources BugPartner can use — add the keys you have.
AI models
$0 with free tiers or fully local
- OpenRouterfree models (Kimi K2, etc.)
- Google Geminifree tier
- NVIDIA NIMfree tier
- OpenCodefree tier
- Ollama (local)no key · runs offline
Attack surface
internet-wide search
- Shodan100 credits/mo
- Censys~100 credits/mo
- FOFA100 queries/day
- ZoomEye10K results/mo
- FullHunt100 queries/mo
- BinaryEdge250 queries/mo
DNS · Intel · Recon
passive data
- SecurityTrails50 queries/mo
- AlienVault OTXunlimited
- Chaos (PD)100 lookups/day
- VirusTotal500/day
- urlscan.io10K scans/mo
- IPinfo50K req/mo