# Hack My Website

**Canonical:** https://apis.io/providers/hack-my-website/  
**Website:** https://hackmywebsite.io  
**APIs profiled:** 1

Automated web-application security scanner that runs 200+ checks across DAST (OWASP ZAP), CVE exploit templates (Nuclei), static analysis (Semgrep/SAST), and SaaS-misconfiguration checks, producing a 0-100 AI Launch Score with go/no-go readiness bands and 1-click AI remediation fix prompts for Cursor, Claude Code, and Windsurf. Built by Aivi Labs for teams shipping sites made with AI coding tools (Lovable, Bolt, v0, Cursor, Claude Code); currently early-access/waitlist with no public developer API.

## Kin Score — 25.3 / 100 (emerging)

Scored 2026-09-18 under rubric 0.22.0.

| Facet | Score |
|---|---|
| Discoverability | 72.2 |
| Contract Quality | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 14.3 |
| Access Clarity | 76.3 |

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## APIs (1)

- **Hack My Website** — Automated website security scanner. Only an agent-native surface (llms.txt) is publicly declared; no conventional API contract (OpenAPI/GraphQL/AsyncAPI/gRPC/SOAP) is published....

## Security (1)

- **Hack My Website Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (1)

- **Hack My Website Plans Pricing**

## Tags

Application Security, Web Security, Vulnerability Scanning, DAST, SAST, Cybersecurity, AppSec, DevSecOps, AI Remediation, Software-as-a-Service

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/hack-my-website/). Scores are computed from the provider's own public artifacts under a published rubric.