Hey Product Hunt! 👋 I'm the solo developer behind Nyambush. Here's why I built it: I spent years as a SIEM engineer managing 7,000+ endpoints. The pattern I kept seeing: agencies build beautiful WordPress sites, clients skip the maintenance contract, and years later the site is running WordPress 5.x with plugins full of known CVEs. The site loads fine — nobody notices until it's too late. Last month alone, 180 WordPress vulnerabilities were disclosed in a single week. 82.9% of CMS-powered sites in Japan run WordPress. Most get zero maintenance after launch. Nyambush solves this with a different approach: 🔍 **Passive scanning** — No exploit attempts, just DNS queries, HTTP requests, and public database lookups. Safe to scan any domain, even clients you haven't talked to in years. ⚡ **No signup for basic scans** — Enter a domain, get results in under 60 seconds. Same model as SSL Labs. 🤖 **AI Visual Monitoring** — Playwright crawls your site like a real user, then Claude Vision analyzes screenshots for defacement, layout breakage, and SEO spam injection. 💰 **Ready for production** — Stripe payments fully integrated. Free tier with no credit card, upgrade anytime. 🐱 **The name** — "Nyambush" = Nyan (cat/meow in Japanese) + Ambush. A cat that silently ambushes vulnerabilities. **Tech stack for the curious:** Next.js 15 + React 19, Supabase + Drizzle ORM, Claude Sonnet 4.5 for AI reports, Playwright for browser automation, 231 tests passing. I'd love your feedback — especially on: 1. What additional scan modules would be most valuable? 2. Would you use the WordPress plugin for deeper scanning? Try it free: https://nyambush.app Happy to answer any questions! 🐾

Nyambush

Scan any domain in 60s — find DNS, email & WordPress risks

Scan any domain in 60s — find DNS, email & WordPress risks