[benkriefsyef]

Ok, putting this out there because I want feedback from people who actually build and break websites, not from friends being nice.

xseth.com

What it does in plain words: it maps what you have exposed to the internet and uses AI to sort through the findings. It only calls something Proven when a deterministic check confirms it. It doesn't exploit anything and it's not a pentest replacement, it just tells you what's reachable and which findings are real.

Two things I'd love to know:
1. Would you trust a tool like this? If not, why
2. What's confusing or cringe on the site

Be brutal, I can take it.

[Bastille]

Hello, how can we be sure it's your own website ?

[CL1B]

It looks like any pure vibe coded website, very recognizable. Which is not a good thing in this sector, furthermore all the "tooling" visual examples is also vibe coded which renders your site useless and scaring customers away.

Vibe code = mostly bad impression in the intermediate sectors of cyber security. We much rather see a out of date, boring and clunky site with real visuals, reviews and things like that.

Not registered, not licensed; No real VAT applied business thus you are likely not going to get any real substance from it. If you're new to it all I' suggest a course in business and also one in webdev and preferably one in marketing with eye for impression/ux.

[benkriefsyef]

Thanks both, this is exactly the kind of feedback I was hoping for.

@Bastille fair question. Nothing gets scanned unless the owner signs a testing authorization with us first. No signed authorization, no scan. Ownership checks are the part I care about most because a tool like this is useless (and dangerous) if anyone can point it at someone else's site.

@CL1B that one stings but you're right. The visuals on the site are placeholders and it shows, so I'm replacing them with real screenshots from the actual console. Point taken on boring but real beating shiny and fake. On the business side we are actually registered, Xseth is a Delaware C Corp, but nothing on the site makes that obvious and that's on us. Adding company details and a proper about page.

If you had to pick one thing that would make you trust a small security company, what would it be? Real case studies, named founders, something else?