> ## Documentation Index
> Fetch the complete documentation index at: https://docs.osto.one/llms.txt
> Use this file to discover all available pages before exploring further.

# Scanner

> Scan your websites and mobile apps for security vulnerabilities with Osto's Web Scanner and App Scanner.

The **Scanner** gives you on-demand security testing for the two surfaces attackers probe most: your public websites and your mobile applications. Each scanner runs against assets you've already registered (or uploaded) and reports the vulnerabilities, severities, and fixes that matter.

> **Path:** Scanner

<CardGroup cols={2}>
  <Card title="Web Scanner" icon="globe" href="/how-to-guides/scanner/web-scanner">
    Scan your registered domains for web vulnerabilities and track a security score over time.
  </Card>

  <Card title="App Scanner" icon="mobile" href="/how-to-guides/scanner/app-scanner">
    Upload an Android or iOS app package to analyze it for vulnerabilities, privacy risks, and hardcoded secrets.
  </Card>
</CardGroup>

## Which scanner do I use?

* **Web Scanner** — for the websites and subdomains you manage in Osto. It scans live domains and surfaces vulnerabilities, top attack paths, and a security score.
* **App Scanner** — for mobile app builds. Upload an `.apk` (Android) or `.ipa` (iOS) file and Osto analyzes the binary for security and privacy issues.

<Note>
  Both scanners are read-only assessments. Running a web scan doesn't change your site, and uploading an app build doesn't publish or modify it anywhere.
</Note>