ecoa
From ≈ $11/user/moActively maintained
not read yet
Use
- For
- Developers and small teams publishing web apps who want security checks without being specialists
- Price
- From ≈ $11/user/moR$57.90 · pricing page, read Oct 15, 2026
- Activity
- Actively maintainedsite updated 7 days ago
- Used for
- scan a domain's headers, TLS, DNS and email records
- review public files like robots.txt and sitemap
- test an app's backend APIs for access and login flaws
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsecoa.dev ↗
- Privacy policy updated2026-10-15privacy policy ↗
These are ecoa's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverdev.ecoa/ecoaverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-15
- Address to connectmcp.ecoa.dev/api/mcp
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use ecoa for?
Sign in to leave a noteWhat is ecoa?
Scans a site's headers, TLS, DNS, email records and public files, then tests logged-in apps and APIs for security flaws.
Who is ecoa for?
Developers and small teams publishing web apps who want security checks without being specialists
How much does ecoa cost?
Paid plans start at ≈ $11/user/mo (R$57.90/user/mo), per ecoa's pricing page on 2026-10-15.
Do people use ecoa?
Little sign of use.
Is ecoa still maintained?
Actively maintained: site updated 7 days ago.
Does ecoa give refunds?
In its own words (terms of service, 2026-10-15): “No Prorated Refunds: If you cancel or downgrade to a lower plan in the middle of the contracted period, there will be no return or prorated refund of amounts paid .”
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk