Where HostedScan is stronger
Details from hostedscan.com, checked on 23 October 2026.
HostedScan vs MopokeHQ: external scanning that knows what you deployed
HostedScan is a hosted vulnerability scanning service for networks and websites. MopokeHQ includes external scanning as one part of vulnerability response for GitLab teams: targets attach to deployments, and findings sit next to dependency, container, secret and code findings in the same evidence log.
The short answer
Choose HostedScan if
You want a standalone scanner for networks and websites, internal network scanning, or network vulnerability scanners such as OpenVAS and Nessus.
Choose MopokeHQ if
The sites you scan are apps you build and deploy from GitLab, and you want scan results in the same fix and evidence workflow as your code findings.
- Network vulnerability scanning with OpenVAS, and Nessus on Professional.
- Internal network scanning on higher plans. MopokeHQ never connects into customer networks, so it does not scan them.
- Published prices on its pricing page.
- No CI needed. Add a target and scan.
- A SOC 2 Type II report is available. MopokeHQ holds no SOC 2 certification.
Where MopokeHQ fits
External scanning as part of the same loop as your code.
How external scanning works- Targets attach to deployments, so a finding is tied to the app and release it came from.
- Ownership checked first. DNS TXT or /.well-known before any active scan. Unverified targets get passive TLS and header checks only.
- Scan windows. Daily passive checks, weekly templates, ZAP active only inside a window you set.
- Published scanner IP addresses for allowlists.
- One workflow. External findings get the same priority, Now roadmap, verify-on-deploy and evidence log.
- Client notices and evidence packs for agencies.
Feature comparison
HostedScan details checked on 23 October 2026.
| HostedScan | MopokeHQ | |
|---|---|---|
| Port discovery | Nmap | Yes |
| TLS testing | SSLyze | Yes |
| Vulnerability templates | Nuclei | Yes |
| OWASP ZAP | Yes, authenticated on higher plans | Baseline, with active scans opt-in inside your window |
| Network vulnerability scanning | OpenVAS on paid plans, Nessus on Professional | No |
| Internal network scanning | On higher plans | No. MopokeHQ never connects into your network |
| Targets tied to deployments and code | Not on the pages we read | Yes |
| Dependency, container, SAST and secrets scanning | No | Yes, in your CI |
| White-label output | White-label reports on Professional | Client notices, digests, portal and evidence packs |
| Pricing | Published plans with a set number of targets | Bands of active projects, unlimited users |
| Data location | Not stated on the public pages we read | Sydney |
Pricing models
HostedScan prices by plan, each with a set number of targets, and more targets cost extra. See their pricing page.
MopokeHQ prices by band of active projects, with unlimited users. External scanning sits alongside dependency, container and code scanning rather than as a separate product.
How MopokeHQ pricing worksQuestions
How much does HostedScan cost?
HostedScan publishes several monthly plans, each with a set number of targets, plus a larger flexible plan. See hostedscan.com/pricing for current figures (checked 23 October 2026).
What scanners does HostedScan use?
Nmap, SSLyze, OWASP ZAP, OpenVAS and Nuclei on its paid plans, with Nessus on the Professional plan.
Does MopokeHQ scan internal networks?
No. MopokeHQ never connects into customer networks, so it scans only what is reachable from the internet.
Does HostedScan offer a free trial?
Yes. Its site lists a 14 day trial with no credit card required.
Where does HostedScan store data?
Its public pages we read do not say, so ask them. MopokeHQ stores all data in Sydney, Australia.
Put a mopoke on night watch
One job in your CI pipeline. Your first SBOM is matched against every advisory we hold within minutes.