README

[Products] [Attack Surface Management] [About Sn1per] [News] [Contact] [Demo] [Pricing] [Shop]

 Sn1per - The Offensive-Security Platform for Modern Teams

 Recon, scanning, exploitation, and reporting in a single workspace - whether you're a solo pentester or a global SOC.

  Sn1per Professional 2026 is here

 The largest release since v10.0 - Docker-first deployment, Bootstrap 5 / Tabler UI, Workspace Navigator, Workspace + Host Reports with CSV / Excel / PDF export, JSON API v1.0, an Offcanvas Quick Commands sidebar with 13 panels, and expanded modules for ReverseAPK, MassPwn, Threat Intel, Nessus, and Burp.

 Read the release notes → · View pricing →

 Table of Contents

- About
- What Sn1per Is For
- What's New in 2026
- Editions & Pricing
- Install
- Quick Start
- Usage
- Scan Modes
- Integrations
- Use Sn1per from AI assistants (MCP)
- Documentation & Help
- News & Releases
- Community & Support
- Contributing
- License & Legal

 About Sn1per

Sn1per is an offensive-security platform that consolidates reconnaissance, vulnerability scanning, exploitation, and reporting into a single workspace. Built by pentesters since 2015, it ships in three editions - a free Community Edition (source-available, custom EULA - see LICENSE.md) in this repository, a paid Professional edition for individual operators and small teams, and an Enterprise edition for global SOCs - all backed by the same core scanning engine.

Sn1per orchestrates 90+ third-party tools, ships with 600+ exploits and 10,000+ detections, and is used by 500+ teams worldwide. Battle-tested by the community. Built by pentesters, for pentesters.

500+ Teams · 90+ Integrations · 10,000+ Detections · 600+ Exploits · Trusted since 2015

 What Sn1per Is For

Sn1per ships as one platform that covers the core jobs offensive security teams otherwise stitch together from a dozen tools:

- External Attack Surface Management - continuous discovery, monitoring, and active exploitation of every internet-facing asset your organization owns, including the ones nobody on your team knows about.
- Continuous Attack Surface Management - daily-cadence rescans that diff yesterday's surface against today's so new exposures hit your SOC within hours, not the next quarterly pentest.
- Automated Penetration Testing - 600+ exploits and 10,000+ detections orchestrated as a single workflow, with active verification eliminating the false positives version-only scanners ship as "critical."
- Reconnaissance & Attack Surface Discovery - the full phased recon workflow, from OSINT and subdomain enumeration through live-host discovery and fingerprinting, run as one automated pass.

 What's New in 2026

 New (October 2026): the Sn1per MCP Server (beta) lets AI assistants like Claude Code launch Sn1per scans and read the results. Details below.



Workspace Navigator - switch contexts across hosts, scopes, and engagements.



Dashboard - at-a-glance scan posture, top findings, and exploitable assets.

 Highlights

- Docker-f