Free Security Audit
An ephemeral VPS checks your domain, then is deleted. The PDF report arrives by email.
Scan categories.
- › Security headers: CSP, HSTS, X-Frame-Options, Referrer-Policy
- › TLS/SSL: protocol versions, certificate validity
- › Email security: SPF, DKIM, DMARC
- › Subdomain enumeration (amass)
- › DNS and CDN: whether your real server IP is exposed
The paid Deep Scan ($129) adds open ports (nmap, 12 ports), Nuclei templates (CVEs, exposed panels, misconfigurations) and hidden files (.env, backups, git). Active SQL injection and XSS testing is planned and not available yet.
What's in the report.
Executive summary
Severity breakdown, critical findings first.
Per-finding detail
Evidence, severity, remediation steps.
Remediation checklist
Ordered by severity. Copy-paste config snippets where applicable.
Four steps.
Submit your domain
Enter your domain, email, and describe your concerns. Takes 2 minutes.
Scanner spins up
An ephemeral VPS spins up in a cloud datacenter, runs the scan, sends results to our processing backend.
Scanner destroys itself
Immediately after the scan, the VPS is deleted via the provider API. Zero scan infrastructure remains.
PDF in your inbox
The report with findings, severity ratings and remediation steps arrives by email: within 15 minutes after domain verification.
The goal they can't find.
Defense in the dark. No credit card. No footprint.