Meterian Web Scanner

Meterian Web Scanner is a non-invasive web scanning tool that crawls publicly accessible website content to identify vulnerable, outdated, or improperly licensed third-party components. It operates by downloading website contents in a manner similar to a search engine crawler, then analyzes the retrieved content to detect component signatures, classify vulnerabilities, and flag licensing issues.

The scanner can be run locally on a developer's machine or integrated into a CI/CD pipeline for continuous monitoring of security, stability, and license compliance risks. It does not perform load testing or penetration testing — it performs a surface-level analysis to identify component fingerprints without interacting invasively with the target site.

Scan results are delivered as reports that include:

• A complete bill of materials (BOM) listing all identified components
• Known vulnerabilities associated with each component
• Upgrade paths for affected components
• Available license information for each component

Reports can be exported in HTML, PDF, or JSON format and are suitable for sharing with legal counsel or information security officers. Each scan is stored in a dashboard where users can review results asynchronously. Reports can also be deleted upon request.

The scanner is noted to be non-comprehensive when working solely from public website content; a more thorough analysis requires access to source code, which Meterian's command-line scanner supports. Scans typically complete within two minutes.