ModulesLive attack probes· Not available
Live Xss
Live reflected-XSS probe — reflection detection on discovered endpoints.
Not included in any purchasable tier. Not available — reserved for a future penetration-testing product; no scan runs these probes.
Payload reflected unencoded in /search results page
Why we catch it
Active probes against a running site. Not available — reserved for a future penetration-testing product. No GateTest scan or tier runs these probes today.
The Live Xss module sits in this category alongside 4 related modules. Together they form one of the layers of a GateTest scan — checks fire in parallel, findings cluster by root cause, and on paid tiers the AI auto-fix loop reads each finding, writes the fix, validates against the scanner, and opens a PR.
How GateTest covers live xss
- Not purchasable. Not available — reserved for a future penetration-testing product; no scan runs these probes. It's registered in the engine, but no tier includes it.
- Would require explicit authorization. If the future product ships, live probes will only run against a target you've proven you own.
Live Xss is not available
Not available — reserved for a future penetration-testing product; no scan runs these probes. Want to hear if the penetration-testing product launches?
Frequently asked questions
What does the Live Xss module catch?
Live reflected-XSS probe — reflection detection on discovered endpoints. Example finding: Payload reflected unencoded in /search results page
Can I buy a scan that includes Live Xss today?
No. Not available — reserved for a future penetration-testing product; no scan runs these probes. It's registered in the engine and documented here, but it isn't included in any purchasable tier.
Which tiers include the Live Xss module?
None. Not available — reserved for a future penetration-testing product; no scan runs these probes.