NewScan sweeps five attack surfaces — APIs, web apps, network and infrastructure, Wi-Fi, and segmentation — in one local scan, re-running and confirming every finding before it’s reported. Free to download. No account required to run.
MERIDIAN, ID — NewNormal Security, a cybersecurity company focused on high frequency and fidelity Penetration Testing and API Security testing solutions, today launched NewScan, a free, self-hosted, all-in-one local scanner for penetration testers and application security teams.
The Problem: Agentic software development ships code, including APIs, faster than humans can review, while attackers deploy their own agents to intensify attacks year-round. Security teams meanwhile juggle costly, disconnected tools that generate more false positives than insight, and weren’t built for an agentic coding world.
The Solution: NewsScan is a self-hosted, multi-surface scanner. Companies can run it manually, via CI/CD or MCP. It validates all findings; never inflating severity. AI can be applied for use cases it best handles. BYOK or use an AI furnished by NewScan. NewScan covers protocols and attack vectors others don’t attempt, while putting control in the hands of the people using it.
Key capabilities:
NewScan,
- Correlated five-surface coverage;
- Automatic API and endpoint discovery;
- Verified findings with honest severity;
- Local-first privacy with no account needed to run;
- AI-optional BYOK support (OpenAI, Anthropic, Gemini, Ollama);
- CI/CD-ready output.
- REST, SOAP, GRPC, Websockets, Graphql, MCP protocols supported
NewScan Pro,
- an optional paid tier,
- adds over 20 out-of-band detection for blind vulnerabilities,
- integrations with Jira and GitHub,
- compliance-formatted reports (SOC2, PCI, ISO 27001),
- optional in-line AI.
- NewScan is free; NewScan Pro runs $1,985/year.
“Now, any SaaS or midsized company can now continually protect its business with best-in-class tooling for under $2,000 a year,” said Anthony Rethans, CEO and co-founder. CTO and co-founder Anthony Aragues added, “Security can’t be fully outsourced to machines. NewScan gives teams a low-cost way to efficiently own that responsibility.”
NewScan runs on macOS, Windows, and Linux via Docker, available now at newnormalsecurity.com/newscan.
About NewNormal Security
A Meridian, ID cybersecurity company founded on the belief that the industry too often hypes inflated alerts and fear rather than providing real, actionable outcomes. More at www.newnormalsecurity.com.
Media Contact: Anthony Rethans
Company: NewNormal Security, Inc.
Email: press@newnormalsecurity.com
Phone: +1 (415) 307-0876