# Jsmon (jsmon.sh)

Crawls a domain's URLs and analyses their JavaScript for exposed credentials, vulnerable endpoints and third-party risk, alerting via Jira, Slack or email.

- Atlas card: https://inite.ai/en/atlas/jsmon.sh
- Site: https://jsmon.sh
- For: security and tech leaders guarding websites against risky third-party scripts and dependencies
- Categories: data
- Use 0/100 · alive 88/100

## Used for

- scan website JavaScript for leaked secrets and exposed endpoints
- track third-party script dependencies and their known vulnerabilities
- send alerts to Jira, Slack or Linear when vulnerabilities appear

## Price

- from 15 USD/month, no free plan (read 2026-10-17 on https://jsmon.sh/pricing)

## For developers

- API docs: https://docs.jsmon.sh
- MCP server: sh.jsmon/mcp (namespace; auth on 2026-10-17)
- Read 2026-10-17

## Your data

- Certifications stated: soc2, hipaa, iso27001, gdpr, pci
- Read 2026-10-17

---

Source: INITE Atlas, https://inite.ai/en/atlas/jsmon.sh. JSON: https://inite.ai/api/atlas/jsmon.sh. MCP: https://inite.ai/api/mcp (atlas_lookup).