VAddy

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

VAddy is ranked #9 of 31 in vulnerability scanning software on Inferse. It runs on API, Linux, macOS, Self-hosted, Web. There is no free plan. A free trial is offered. Paid plans start at ¥19,800/mo.

Compared on vulnerability scanning software

Free plan: Novaddy.net
Deployment model: cloudvaddy.net
Supported targets: Web applications; authenticated applications; multi-FQDN applications; intranet sites; SPAs; API servers; local development serversvaddy.net
Authenticated scanning: Yesvaddy.net
Continuous scanning: Yesvaddy.net
Asset limit: 3 assetsvaddy.net
Compliance frameworks: IPA Safe Web Site checklist; OWASP Top 10; OWASP ASVSvaddy.net

Facts

Purpose: VAddy is a cloud-based service for automated black-box security testing of web applications.vaddy.net · 3 Oct 2026
Vulnerability coverage: Its listed tests include SQL injection, XSS, remote file inclusion, command injection, and directory traversal.vaddy.net · 3 Oct 2026
Targets: It tests URL path parameters, authenticated web applications, SSL sites, CSRF-token forms, and REST APIs including JSON parameters.vaddy.net · 3 Oct 2026
Integrations: The maker lists Jenkins, CircleCI, Codeship, Travis CI, Wercker, a Web API, a Ruby client, and a Go API command tool.vaddy.net · 3 Oct 2026
Workflow: The home page says VAddy can run in an existing CI process after code changes and alert when a commit contains vulnerabilities.vaddy.net · 3 Oct 2026
Scan limits: The plans list unlimited scan counts, with per-scan time caps of 8, 5, or 2 hours and concurrency caps of 3, 3, or 1 respectively.vaddy.net · 3 Oct 2026
Local scanning: The plan page lists local-environment scanning as a basic feature.vaddy.net · 3 Oct 2026
Trial: New accounts can use Professional-equivalent features free for one week, after which the account is temporarily suspended until upgraded.vaddy.net · 3 Oct 2026
Support: The plan page includes free human support and PDF report export.vaddy.net · 3 Oct 2026
Hosting and data: The security page says VAddy uses AWS and stores customer data in a data center in Japan.vaddy.net · 3 Oct 2026
Data handling: The maker says it accesses crawl and vulnerability-identifying data only with prior customer permission and automatically deletes data no longer accessible under the current plan.vaddy.net · 3 Oct 2026
Compliance: Bitforest says it has ISO 27001 and ISO 27017 certifications, and lists Tokyo as its headquarters.bitforest.jp · 3 Oct 2026
Intended users: The plan page describes Enterprise as suited to development and QA teams and Advanced as for users needing a vulnerability assessment standard aligned with IPA guidance.vaddy.net · 3 Oct 2026