Two ways to get your site scanned
The public scan is free. The full scan is free during beta. A person runs it, reviews it, and emails you the report, so slots are limited.
Free
Public scan
Instant and no signup. Paste a URL on the homepage and read the report right there.
What it covers
- HTTPS setup and certificate expiry
- DNS and domain configuration
- Session cookies and browser security headers
- A targeted sweep for exposed files
- Speed and reliability basics
Free during betalimited slots
Full scan
A person runs the full scan, reviews the findings, and emails you the report. It isn't instant, and we only take on a handful of sites at a time.
Everything in the public scan, plus
- Admin panels, dashboards, and other control screens, checked for anything reachable without a password
- A much wider sweep for exposed configs, backups, and secrets than we run publicly
- Sign-in-flow checks (credential leaks, account-guessing, unsafe post-login redirects) run against a login page you point us to
The sign-in checks need a login URL from you. Without one, what the full scan adds is the admin-route probing and the wider file sweep.
See every surface we check
Nothing is charged today. The full scan is the tier that will eventually cost money. Beta users will hear from us before that changes.