Coding & productReviewed listing

Pennie Tester

Passive web security scanner for consultants and security teams. Checks sites you point it at for OWASP Top 10 and related weaknesses, without running exploits unless you confirm written permission.

What it does

  • Checks sites you point it at for OWASP Top 10 and related weaknesses

In the creator’s own words.

1What you’ll need

  • A Bot account, or the Bot app on your phone

From the bot’s share page, which lists no other requirements.

Avoid sharing passwords, keys or private personal data.

2Set it up

Summary from the bot’s share page:

  1. Open Pennie Tester’s share page with Open in Bot, or on a phone with the app, tap Add to Bot app.
  2. Add Pennie Tester in Bot.
  3. Start a chat with Pennie Tester, then review what it produces and check any factual claims.

The creator’s post on X may have more detail.

3Use it

Open in Bot ↗