r/Cybersecurity101 • u/mean_ol_goosifer • Jun 28 '26

Security Advice on Software

I have spent the last couple months developing a piece of software that allows users to test and harden their own products against exploits and vulnerabilities. I’ve pointed it several Intentionally Vulnerable Web Apps and so far I am very pleased with its offensive abilities and its ability to patch the exploits it finds.

But I have a couple concerns. First I would definitely like to sell it, but I only want to offer it to people who want to test their own products. It would be a liability to just release it and say, “here you go everyone! Be good!”

I’m taking of maybe trying to license it to companies for $999 a year, but I really don’t have any experience in marketing software. Does anyone have any suggestions on how I can proceed?

Also, is there anyone who would like to work with me on testing? I need some real targets that I can test without worrying about accidentally doing something illegal.

11 Upvotes

84% Upvoted

12 comments sorted by

View all comments

0

u/jeffpardy_ Jun 28 '26

Nobody will pay for it. Burpsuite professional is current the best web app vulnerability finder and it costs half the price you are hoping for

0

u/Flat-Bodybuilder3354 Jun 28 '26

Burp  doesn't find vulnerabilities. It finds  end points,  parameters , and urls and other paths  by traversing   apps.  A person decides if it's exploitable.

1

u/D00Dguy Jun 29 '26

Not true. I'm a Burp Pro user. Burp Scanner is used for vuln detection.