How the checkup works

Think of it as a checkup, not surgery. We look at your site from the outside, the way any visitor's browser does, and report what's out of range.

1. You paste your address

We visit your home page over HTTPS and plain HTTP, read the response headers and cookies, check the security certificate, and look up your domain's email records. We also ask for a short list of files that should never be public, like .env and .git, and only count them as exposed if what comes back really is that file.

2. You see what's flagged, free

Before you pay anything, you see how many results are flagged and how serious each one is. If nothing is flagged, there's nothing to buy.

3. For $1, you get the report

The report ranks the 3 to 5 results that matter most for your site, explains each in plain English, and gives you fixes written for the platform your site runs on: Vercel, Netlify, Cloudflare, Nginx, Apache, WordPress, Shopify, Squarespace, Wix and others. Everything else we noticed is listed too.

Our scanner does the testing. An AI model then ranks the findings and words the fixes, starting from fixes we've written and tested. It never sees your site's pages directly, and we check its work against the scan results before you see it.

What we never do

• Try to log in, guess passwords, or submit forms.
• Send attack payloads or probe for vulnerabilities.
• Keep secret values. If a settings file is exposed, we record which settings are in it, never their values.
• Visit private networks. The scanner refuses addresses that aren't on the public internet.

The limits

Because we only look from the outside, we can't see problems behind a login, inside your server, or in plugins that don't reveal themselves. A clean result is a good sign, not a guarantee.

Fixing things yourself

Our fix guides explain the most common problems in plain English, with the config for each platform. The report links each of your results to the right guide.

Privacy

You don't need an account. Stripe asks for your email when you pay, and we use it only to send you the link to what you bought. Your report lives at a private link that only you have, so keep it somewhere safe. Payments are handled entirely by Stripe; we never see your card. Our privacy policy has the details.