// BLACK_BOX_SECURITY_ASSESSMENT
AI-powered threat analysis for your domain. Submit a URL, get a comprehensive STRIDE threat model and attack tree — no agents installed, no source code needed.
// free_tier: 2 scans/account · no_install_required · passive_probing_only
$ nullray scan --domain example.com
[RECON] DNS enumeration ........................ ✓
[RECON] Subdomain discovery .................... ✓
[RECON] Port scanning .......................... ✓
[RECON] TLS/SSL analysis ....................... ✓
[RECON] HTTP header analysis ................... ✓
[ANALYSIS] Running STRIDE threat model ......... ●
[ANALYSIS] Generating attack trees ............. ○
// 6 findings detected — 2 critical, 3 high, 1 medium
// HOW_IT_WORKS
From domain input to actionable security report in minutes.
Enter your target domain. We validate ownership and check against our blocklist before proceeding.
Our AI agent performs passive reconnaissance, STRIDE analysis, and builds attack trees — all without touching your systems.
Receive a detailed threat report with STRIDE categories, attack tree visualizations, and prioritized remediation steps.
// CAPABILITIES
Every feature designed to surface what matters before it becomes a breach.
Systematic analysis across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
Interactive attack trees map exploitation paths from entry point to impact. See exactly how an attacker could chain vulnerabilities.
Zero intrusion. No injection, brute force, or state modification. We observe your attack surface exactly as an attacker would — safely.
Watch your scan unfold live. Every check, every finding streamed to your dashboard as it happens.
Claude Sonnet for rapid threat classification. Claude Opus for deep report synthesis. Two models, one comprehensive assessment.
Every finding includes severity rating, exploitation likelihood, and concrete fix recommendations your team can act on immediately.
// PRICING
Start free. Pay only when you need the full picture.
✓ Domain reconnaissance
✓ Basic STRIDE classification
✓ Severity count preview
✓ 2 scans per account
× Full report details
× Attack tree visualization
start_free_scan()✓ Everything in free tier
✓ Deep AI agent analysis
✓ Complete STRIDE breakdown
✓ Interactive attack trees
✓ Remediation playbook
✓ Exportable PDF report
get_full_report()// READY_TO_SCAN
Find out what attackers see before they act on it.
scan_domain()// no_credit_card · results_in_minutes · cancel_anytime