What will you actually check on my Jenkins?

Version and plugins, anonymous API read, the script console, the people directory, and open sign-up.

Do I have to install an agent?

No. You enter the public URL. The audit runs from the outside against what the internet can already see.

You get the report in your account after signup. $49 covers the month, and this run is included.

One month of Starter access: up to 10 runs and 3 domains, including this audit. The finished report stays in the account.

Jenkins security audit

API readable with no login?

Deeper than a manual audit or a tool. At the scale AI agents attack.

The audit starts after signup. $49 for one month. Your report stays in your account.

Jenkins templateyour-site.com

01 / 08·running

Public surface

Other hosts and open ports

Live audit preview$49 · 1 month

Signals

Version and pluginsThe controller release, and the plugin list when Jenkins will show it.
Known CVEsPublished holes in that core and in the plugins we could read.
Anonymous accessThe API, the people directory, and the CLI with no login.
Script consoleThe script console and Manage Jenkins reachable from the internet.

How it runs

Other hostnames on the same domain, then the ports those servers leave open, before anything Jenkins-specific.

Jenkins version and plugins, anonymous API read, the people directory, and the script console.

Version and plugins
The controller release, and the plugin list when Jenkins will show it.
Known CVEs
Published holes in that core and in the plugins we could read.
Anonymous access
The API, the people directory, and the CLI with no login.
Script console
The script console and Manage Jenkins reachable from the internet.

Each issue names the host, shows the evidence, and says what to fix. Anything we could not confirm stays marked that way.

FAQ

What the run covers, and when the report opens in the account.

Jenkins audit

Audit Jenkins from the outside.

Deeper than a manual audit or a tool. At the scale AI agents attack.