# x8

x8 is a Penetration Testing product. It runs on-premises. Pricing is free.

x8 is a hidden parameters discovery suite that automatically identifies undocumented parameters in web applications and APIs for security testing purposes.

Checked October 2026.

## What is x8?

x8 is a hidden parameters discovery suite designed to identify undocumented or hidden parameters in web applications and APIs.

The tool performs automated discovery of parameters that may not be visible in standard application interfaces or documentation. It supports multiple protocols and data formats, allowing security professionals to analyze various types of applications and services.

x8 includes customizable filtering and sorting capabilities to help organize and prioritize discovered parameters. This functionality enables users to focus on the most relevant findings based on their specific testing requirements.

The tool is primarily used during security assessments to uncover potential attack vectors through hidden or undocumented parameters that could lead to security vulnerabilities.

Tags: Reconnaissance

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,915
- Website: github.com

## x8 FAQ

### What is x8?

x8 is a product in the Penetration Testing category. It covers Reconnaissance.

### What is the pricing for x8?

x8 is free. Download and setup instructions are at https://github.com/Sh1Yo/x8/.

### What are alternatives to x8?

Alternatives to x8 listed on CybersecTools:

1. [RunSybil](https://cybersectools.com/tools/runsybil) - AI-driven continuous attack surface assessment and validation platform. (Commercial)
2. [StealthNet AI](https://cybersectools.com/tools/stealthnet-ai) - AI agent fleet for autonomous pentesting across external, API, web & vishing surfaces. (Commercial)
3. [PT Dephaze](https://cybersectools.com/tools/pt-dephaze) - Agentless automated pentest platform for continuous infrastructure security testing. (Commercial)
4. [Webray RayBox](https://cybersectools.com/tools/webray-raybox) - Automated penetration testing appliance covering recon-to-exploitation attack chain. (Commercial)
5. [NetSPI Platform](https://cybersectools.com/tools/netspi-platform) - PTaaS platform combining human pentesters with AI for continuous security testing. (Commercial)

Compare all x8 alternatives at [https://cybersectools.com/alternatives/x8](https://cybersectools.com/alternatives/x8)

### What deployment and organization size does x8 fit?

x8 is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.

## Compare x8 with similar solutions

- [x8 vs RunSybil](https://cybersectools.com/compare/runsybil-vs-x8)
- [x8 vs StealthNet AI](https://cybersectools.com/compare/stealthnet-ai-vs-x8)
- [x8 vs PT Dephaze](https://cybersectools.com/compare/pt-dephaze-vs-x8)

All alternatives to x8: [/alternatives/x8](https://cybersectools.com/alternatives/x8)

---

Source: https://cybersectools.com/tools/x8

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on x8: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md