StackShield
From $29/moActively maintained
≈ 12visits/mo
Little sign of use · estimate, read Oct 14, 2026
- For
- Laravel teams watching their deployed apps from the outside for exposed debug tools and misconfigurations
- Activity
- Actively maintainedrelease 3 weeks ago · site updated yesterday
- Company
- since 2025per their About page
- Used for
- catch exposed Laravel debug endpoints after each deploy
- get alerted when a deploy changes external exposure
- check security headers and open ports from outside
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsstackshield.io ↗
- Founded2025per their About page ↗
- Trains on your dataNoprivacy policy ↗
- Certifications they stateSOC 2 Type II · ISO 27001 · HIPAA · PCI DSSsecurity page ↗
- Privacy policy updated2026-09-05privacy policy ↗
“We do not sell personal data and we do not use your scan results or domains to train machine learning models.”
privacy policy ↗
These are StackShield's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverio.stackshield/stackshieldverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-19
- Address to connectstackshield.io/mcp
- MCP docsstackshield.io/mcpthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
RangerCheckMCP · open
Reads a deployed web app from outside and reports exposed keys, public source maps, open database rules and missing security headers.
1ActiveFrom $39/mo - #2
VICE
Scans websites, APIs and applications for exposed surfaces and misconfigurations, then tracks findings and fixes through rescans.
EmergingActiveFrom ≈ $7.84/mo - #3
UNPWNED
Scans websites for exposed services, secrets, and vulnerabilities across browser, API, network, and code layers.
121ActiveFrom $9/user/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use StackShield for?
Sign in to leave a noteWhat is StackShield?
Scans a running Laravel app from the outside for exposed debug tools, leaked config files and missing security headers, then alerts on changes. It is listed in the Atlas under Developer tools.
Who is StackShield for?
Laravel teams watching their deployed apps from the outside for exposed debug tools and misconfigurations
How much does StackShield cost?
Paid plans start at $29/mo, per StackShield's pricing page on 2026-10-19.
Is StackShield free?
No. Its pricing page showed no free plan on 2026-10-19.
Do people use StackShield?
Little sign of use: ≈ 12 visits/mo · estimate, 2026-10.
Is StackShield still maintained?
Actively maintained: release 3 weeks ago · site updated yesterday.
Does StackShield train AI on your data?
No, per its privacy policy (2026-10-19): “We do not sell personal data and we do not use your scan results or domains to train machine learning models.”
Is StackShield safe?
We do not audit vendors. What StackShield publishes, read 2026-10-19: SOC 2 Type II, ISO 27001, HIPAA, PCI DSS stated on its security page; on training with your data, “We do not sell personal data and we do not use your scan results or domains to train machine learning models.”.
Does StackShield have a free trial?
Yes, a 14-day free trial, per its pricing page (2026-10-19).
How do I cancel StackShield?
In its own words (pricing page, 2026-10-19): “Yes, you can cancel at any time with no cancellation fees.”
Is StackShield HIPAA compliant?
StackShield states HIPAA compliance on its security page (2026-10-19). We have not verified it.
What are alternatives to StackShield?
In Developer tools, by use: RangerCheck, VICE, UNPWNED.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.