The World's Safest
Blind XSS Platform
Fully open source blind XSS detection tool with BYOD support. Your data stays yours, completely private and secure.
How It Works
Inject your payload into any input field, form, or comment section. Get instant notifications when it executes.
Contact Us
Send us a message and we'll get back to you
Why Choose bxss.io?
Built by security researchers, for security researchers. No compromises on privacy or functionality.
Fully Open Source
Complete transparency. Audit the code, contribute, and customize to your needs. No hidden backdoors.
BYOD with Cloudflare D1
Bring Your Own Database using Cloudflare D1 (Free). Your data stays in your control.
Privacy-First Architecture
We can't read your vulnerability data, even if we wanted to. Zero-knowledge architecture by design.
Payload Tracking
Never forget where you placed a payload. Track every injection point with detailed metadata.
Free Forever
No premium tiers, no hidden costs.
Self-Hostable
Deploy on your own infrastructure. Full control over your security testing platform.