A platform dedicated to providing unbiased reviews of newly launched applications, analyzing everything from their features to their full potential.

info@scoutforge.net

Product

Company

Crafted by Akatron Network

A platform dedicated to providing unbiased reviews of newly launched applications, analyzing everything from their features to their full potential.

info@scoutforge.net

Product

Company

Crafted by Akatron Network

qsa.sh

Roasted

Scout Review

out of 100

0 Feedbacks

No feedback yet

Instant external security scan of your own IP via curl co...

Security

Productivity

Development & Engineering

Consumer Tools

Business Intelligence

95 total views

Updated Jul 30, 2026

About

qsa.sh is a refreshingly simple security tool that lets you run a full external port and vulnerability scan on your own public IP with a single curl command. No installation, no agents, no account required. Under the hood, it chains together naabu, nmap with vulners, and nuclei to check for open ports, service versions, TLS posture, and known CVEs—all streamed live to your terminal in about 30 seconds. The Free tier covers the top 1,000 ports and ~2,000 nuclei templates; Full ($5/mo) expands to all 65,535 ports; Deep ($7 one-time) runs the entire nuclei template set (~10,500) for a thorough 13–16 minute scan with a full emailed report. I love how it gives you an outside-in perspective of your own host without any setup hassle. Just run curl qsa.sh or curl https://qsa.sh (encrypted) and watch the results pour in. It's perfect for quick security assessments, but remember—you can only scan your own IP, and known CGNAT, carrier, proxy, VPN, and Tor addresses are blocked. The ephemeral n...

72/100

Scout Review

Design (UI)

Usability (UX)

Security

Speed

Accessibility

Growth Potential

Neutral

0Feedbacks

Positive

Neutral

Negative

Target Customer Profile

Demographic

Sysadmins and DevOps engineers

Pain Points

Need quick, agentless external vulnerability checks on personal or lab IPs

Primary Needs

Instant scan, no install, live terminal output

Demographic

Security researchers and penetration testers

Pain Points

Want to verify tool output or get a fast outside-in perspective on own IP

Primary Needs

Comprehensive CVE checks, multiple scan depths, no stored results

Demographic

Freelancers and small business IT managers

Pain Points

Limited budget for security tools, need a free or low-cost scan option

Primary Needs

Cost-effective, easy to use, immediate actionable findings

Alternatives

Nmap

Traditional network scanning tool requiring local installation and manual setup.

Shodan

Internet-connected device search engine; provides external perspective but not live scans of your IP.

Nuclei

Fast vulnerability scanner; qsa.sh uses it but does so remotely via curl without local install.

scoutforge

Jul 30, 2026

Scout Review

qsa.sh delivers exactly what it promises: a zero-friction external scan of your own public IP using well-known open-source tools. The experience is fast, transparent, and refreshingly free of accounts or installs. Limitations around target scope and carrier networks are honest and well documented. The product is still extremely young, so polish and community signals remain light.

Design (UI)

Clean terminal-first aesthetic with strong code-block focus and consistent dark theme. Hero feels cramped and navigation is generic with low-contrast elements.

Usability (UX)

One-command external scan with zero setup. Clear consent gate and tier comparison table. Limited to own IP only and blocks common CGNAT/carrier ranges.

Speed

Perfect Lighthouse 100/100 on both mobile and desktop. Minimal assets and fast LCP keep the landing page snappy.

Security

Strong header hygiene (CSP, secure cookies, frame protection) but missing HSTS and email auth records. No third-party compliance attestations published.

Accessibility

Automated score 100/100 with one minor label mismatch. Responsive dark theme works well; no dedicated accessibility statement or language options.

Growth Potential

Brand-new Product Hunt launch with modest ~100 upvotes. No reviews, no GitHub, no community presence yet. Early trajectory only.

Key Features

One-command external scan via curl with live terminal streaming
Three tiers: Free (~30s, top 1k ports), Full ($5/mo, all ports), Deep ($7 one-time, full nuclei + report)
Zero storage, explicit consent window, scans only the connecting IP

Improvement Areas

Missing HSTS, SPF, DMARC and any third-party security attestations
Hero section feels cramped; navigation lacks visual polish
Extremely early stage with minimal reviews or community signals

Design & Usability

qsa.sh leans hard into terminal minimalism. The hero puts the curl command front and center, which matches the product's entire value prop. Navigation is functional but unremarkable, and the body text below the fold gets dense quickly. On the usability side, the one-command experience is genuinely delightful—no accounts, no agents, instant feedback. The hard limits (own IP only, CGNAT blocks, 15-second consent window) are clearly communicated and feel like deliberate safety choices rather than afterthoughts. Pricing comparison on its own page removes guesswork.

Speed & Security

Performance is excellent; Lighthouse hands it perfect scores on both mobile and desktop thanks to tiny assets and a static-first approach. Security headers are mostly solid (CSP, secure cookies, proper referrer policy) but the absence of HSTS and SPF/DMARC keeps it from feeling enterprise-grade. No public audits or bug-bounty program appear on the site or in search results, which is typical for a solo or tiny-team side project at this stage.

Accessibility & Growth

Accessibility scores top marks in automated testing with only one minor label issue. The dark theme maintains good contrast and the layout is responsive. Growth is the weakest dimension: the product launched on Product Hunt in the last week of July 2026 and has collected roughly 100 upvotes with almost no other footprint—no GitHub repo, no independent reviews, and only a couple of Reddit launch posts. At this age that is normal, but it also means the traction story is still just beginning.

Conclusion

If you need a quick outside-in check on a VPS or lab box you control, qsa.sh is worth a curl right now. Just remember it only ever scans the IP you connect from.

Suggestions for Improvement

Add a visible security or compliance page even if it just lists current header posture and future plans
Publish the GitHub repo for the open-source components or at least a changelog
Improve hero spacing and give the navigation bar clearer active states or hover feedback
Consider a lightweight status or uptime page to build trust for paid tiers

AI-generated editorial review — scores out of 100.

The Roast

qsa.sh is the security tool equivalent of 'just curl it.' It works, it's fast, and it refuses to hold your hand—or your data. The main flaw is that it only just showed up and the rest of the internet hasn't noticed yet.

Design

Hero text and code block are practically kissing. Navigation looks like it was copy-pasted from a template and then forgotten.

Usability

Works exactly once you figure out you can only scan yourself. The 15-second abort window is the nicest 'are you sure' dialog I've seen.

Speed

Annoyingly fast for a site that basically just shows one curl command. Show-off.

Security

Headers look like someone read the OWASP checklist once. Still waiting on that SOC 2 or even a basic security.txt.

Accessibility

Lighthouse loves it. Real humans might still wonder why that one button has no accessible name.

Growth

Launched this week and already has a Product Hunt page. That's the entire growth story so far.

Design & Usability

The hero is so tight the headline is basically breathing down the curl command's neck. Navigation bar looks like it was generated by 'make navbar' and then left alone. Usability wins because the product literally does one thing and does it without friction, but the 15-second abort window is doing a lot of heavy lifting for consent UX.

Speed & Security

Speed is stupidly good—Lighthouse 100s across the board. Security headers are competent but the missing HSTS and SPF/DMARC feel like the checklist got cut off at item 9. No audits, no bug bounty, just vibes and a privacy statement.

Accessibility & Growth

Automated a11y is perfect except one label. Growth is basically 'we launched on Product Hunt yesterday.' 100 upvotes and a couple Reddit posts is the entire résumé so far. Respect the hustle, but the traction graph is still a flat line.

The Verdict

Source: I clicked around for an hour and ran the free scan twice. Still waiting for someone else to review it.

Free advice, no refunds

Throw a security.txt and a simple /security page up so people stop guessing
Open-source the wrapper or at least show the exact nuclei template counts per tier
Give the nav bar some love—active states and better contrast on that tiny button
Add a public changelog or status page once paid tiers go live

Roasted with love. Scores are identical to the review — only the delivery got meaner.

Alternatives Comparison

Features	qsa.sh	Nmap	Shodan	Nuclei
Installation required	None (curl only)	Local install required	None (web service)	Local install required
Target scope	Own public IP only	Any IP (with permission)	Any indexed device	Any target (local run)
Live terminal output	Yes, streamed	Yes, local CLI	No (web dashboard)	Yes, local CLI
Pricing model	Free tier + $5/mo or $7 one-time	Free / open source	Free tier + paid plans	Free / open source

User Registration Required

To leave a comment, please create an account or sign in with an authorized profile.

User Comments

No comments yet

Be the first to share your experience with this app.

A platform dedicated to providing unbiased reviews of newly launched applications, analyzing everything from their features to their full potential.

info@scoutforge.net

Product

Company

Crafted by Akatron Network

A platform dedicated to providing unbiased reviews of newly launched applications, analyzing everything from their features to their full potential.

info@scoutforge.net

Product

Company

Crafted by Akatron Network

qsa.sh

Roasted

Scout Review

out of 100

0 Feedbacks

No feedback yet

Instant external security scan of your own IP via curl co...

Security

Productivity

Development & Engineering

Consumer Tools

Business Intelligence

95 total views

Updated Jul 30, 2026

About

72/100

Scout Review

Design (UI)

Usability (UX)

Security

Speed

Accessibility

Growth Potential

Neutral

0Feedbacks

Positive

Neutral

Negative

Target Customer Profile

Demographic

Sysadmins and DevOps engineers

Pain Points

Need quick, agentless external vulnerability checks on personal or lab IPs

Primary Needs

Instant scan, no install, live terminal output

Demographic

Security researchers and penetration testers

Pain Points

Want to verify tool output or get a fast outside-in perspective on own IP

Primary Needs

Comprehensive CVE checks, multiple scan depths, no stored results

Demographic

Freelancers and small business IT managers

Pain Points

Limited budget for security tools, need a free or low-cost scan option

Primary Needs

Cost-effective, easy to use, immediate actionable findings

Alternatives

Nmap

Traditional network scanning tool requiring local installation and manual setup.

Shodan

Internet-connected device search engine; provides external perspective but not live scans of your IP.

Nuclei

Fast vulnerability scanner; qsa.sh uses it but does so remotely via curl without local install.

scoutforge

Jul 30, 2026

Scout Review

qsa.sh delivers exactly what it promises: a zero-friction external scan of your own public IP using well-known open-source tools. The experience is fast, transparent, and refreshingly free of accounts or installs. Limitations around target scope and carrier networks are honest and well documented. The product is still extremely young, so polish and community signals remain light.

Design (UI)

Clean terminal-first aesthetic with strong code-block focus and consistent dark theme. Hero feels cramped and navigation is generic with low-contrast elements.

Usability (UX)

One-command external scan with zero setup. Clear consent gate and tier comparison table. Limited to own IP only and blocks common CGNAT/carrier ranges.

Speed

Perfect Lighthouse 100/100 on both mobile and desktop. Minimal assets and fast LCP keep the landing page snappy.

Security

Strong header hygiene (CSP, secure cookies, frame protection) but missing HSTS and email auth records. No third-party compliance attestations published.

Accessibility

Automated score 100/100 with one minor label mismatch. Responsive dark theme works well; no dedicated accessibility statement or language options.

Growth Potential

Brand-new Product Hunt launch with modest ~100 upvotes. No reviews, no GitHub, no community presence yet. Early trajectory only.

Key Features

One-command external scan via curl with live terminal streaming
Three tiers: Free (~30s, top 1k ports), Full ($5/mo, all ports), Deep ($7 one-time, full nuclei + report)
Zero storage, explicit consent window, scans only the connecting IP

Improvement Areas

Missing HSTS, SPF, DMARC and any third-party security attestations
Hero section feels cramped; navigation lacks visual polish
Extremely early stage with minimal reviews or community signals

Design & Usability

Speed & Security

Accessibility & Growth

Conclusion

If you need a quick outside-in check on a VPS or lab box you control, qsa.sh is worth a curl right now. Just remember it only ever scans the IP you connect from.

Suggestions for Improvement

Add a visible security or compliance page even if it just lists current header posture and future plans
Publish the GitHub repo for the open-source components or at least a changelog
Improve hero spacing and give the navigation bar clearer active states or hover feedback
Consider a lightweight status or uptime page to build trust for paid tiers

AI-generated editorial review — scores out of 100.

The Roast

qsa.sh is the security tool equivalent of 'just curl it.' It works, it's fast, and it refuses to hold your hand—or your data. The main flaw is that it only just showed up and the rest of the internet hasn't noticed yet.

Design

Hero text and code block are practically kissing. Navigation looks like it was copy-pasted from a template and then forgotten.

Usability

Works exactly once you figure out you can only scan yourself. The 15-second abort window is the nicest 'are you sure' dialog I've seen.

Speed

Annoyingly fast for a site that basically just shows one curl command. Show-off.

Security

Headers look like someone read the OWASP checklist once. Still waiting on that SOC 2 or even a basic security.txt.

Accessibility

Lighthouse loves it. Real humans might still wonder why that one button has no accessible name.

Growth

Launched this week and already has a Product Hunt page. That's the entire growth story so far.

Design & Usability

Speed & Security

Accessibility & Growth

The Verdict

Source: I clicked around for an hour and ran the free scan twice. Still waiting for someone else to review it.

Free advice, no refunds

Throw a security.txt and a simple /security page up so people stop guessing
Open-source the wrapper or at least show the exact nuclei template counts per tier
Give the nav bar some love—active states and better contrast on that tiny button
Add a public changelog or status page once paid tiers go live

Roasted with love. Scores are identical to the review — only the delivery got meaner.

Alternatives Comparison

Features	qsa.sh	Nmap	Shodan	Nuclei
Installation required	None (curl only)	Local install required	None (web service)	Local install required
Target scope	Own public IP only	Any IP (with permission)	Any indexed device	Any target (local run)
Live terminal output	Yes, streamed	Yes, local CLI	No (web dashboard)	Yes, local CLI
Pricing model	Free tier + $5/mo or $7 one-time	Free / open source	Free tier + paid plans	Free / open source

User Registration Required

To leave a comment, please create an account or sign in with an authorized profile.

User Comments

No comments yet

Be the first to share your experience with this app.

A platform dedicated to providing unbiased reviews of newly launched applications, analyzing everything from their features to their full potential.

info@scoutforge.net

Product

Company

Crafted by Akatron Network

qsa.sh Review | Scout Forge