PEACE OF MIND STARTS WITH CLARITY

Your website works. How well is it protected?

Understand potential risks from public signals. A clear report and practical next steps for you or your developer.

Website (link or domain)Email for the report

ServiceOne-off audit$5Full audit$19Everything in the security check + speed, SEO of 25 pages, AI business/UX review, interactive report.Monitoring$12/moSecurity check now + 30 days of SSL certificate expiry watching, no auto-renewal.Agency$3510 security checks for any sites at $3.50 each — credits never expire.

What’s included

HTTPS and SSL certificate: expiry, chain, TLS versions, HTTP redirect
Security headers, cookies, mixed content, software version disclosure
Exposed service files and backups: .git, .env, database dumps, phpinfo and more
Email and DNS: SPF, DMARC, DKIM, CAA, DNSSEC
Known vulnerabilities (CVE) in detected CMS, plugins, PHP and JS libraries; AI service keys in page code
Report in English or Russian: PDF by email and a page in “My reports”

⏱ usually within 10 minutes after the payment is confirmed👤 Site owners who want to quickly find obvious holes.

Sample report ↗

See a sample report

The report goes to: enter your email

No sign-up, no confirmations: after payment the check starts by itself, the report and PDF are emailed to you and kept in this browser (“My reports”).

Only non-invasive checks

SiteCheck•••

SAMPLE REPORT

shop.example.com

32/100

Security score

Made-up shop · demo data

5 · Critical3 · High

⚡ Actively exploitedPHP2Shellpassword-less takeover of PHP sites

See a sample report Download PDF

Know what to fix first

Early preview · PDF reports

01 / How it works

From a domain to a clear plan

No complex tools. You stay in control of every step.

Enter your site and email

A link or a plain domain both work — https://example.com or example.com.

Choose a service and pay

Tick the consent to a passive check and go straight to payment. No sign-up.

Get the report by email

The report with a PDF: risks, priorities and step-by-step fixes. Also in “My reports” on the site.

SiteCheck / Only non-invasive checks

Passive checks only, with your consent.

Before paying you confirm that you own the website or are entitled to order its passive check; we record the time, IP and offer version. The check looks at the site like an ordinary visitor: public data and ordinary GET/HEAD requests only — at most 90 requests, no more than one per second, no attacks, password guessing or break-in attempts.

No attacks, password guessing or vulnerability exploitation.

02 / Pricing

Clear pricing. No surprises.

One-off audit, monthly monitoring or a pack of 10 audits.

One-off audit

HTTPS and SSL certificate: expiry, chain, TLS versions, HTTP redirect
Security headers, cookies, mixed content, software version disclosure
Exposed service files and backups: .git, .env, database dumps, phpinfo and more
Email and DNS: SPF, DMARC, DKIM, CAA, DNSSEC
Known vulnerabilities (CVE) in detected CMS, plugins, PHP and JS libraries; AI service keys in page code
Report in English or Russian: PDF by email and a page in “My reports”

⏱ usually within 10 minutes after the payment is confirmed👤 Site owners who want to quickly find obvious holes.

Sample report ↗

$5one time

Choose plan

Full audit

Everything in the one-off security check
Speed and Core Web Vitals: Lighthouse run for mobile and desktop (LCP, CLS, TBT and more)
SEO crawl of up to 25 pages: title, description, H1, canonical, alt, hreflang, structured data, broken links
AI business and UX review: offer clarity, calls to action, contacts, prices, trust
Overall score and a prioritised task list
Interactive HTML report and PDF in English or Russian — by email and in “My reports”

⏱ usually within 20 minutes after the payment is confirmed👤 Anyone launching or redesigning a site who wants security, speed, SEO and messaging in one go.

Sample report ↗

$19one time

Choose plan

FOR ONGOING PEACE OF MIND

Monitoring

Right after payment — a full security check, same as the one-off
For 30 days we check the SSL certificate expiry date from that check every day
An email if the certificate has 14 days or less left
Report and PDF — by email and in “My reports”
Prepaid for 1 month, no auto-renewal; a repeat scan after a month is not included — renew when you need it

⏱ first report usually within 10 minutes after the payment is confirmed👤 Those who need a check now and an SSL renewal reminder during the month.

$12/ month

Choose plan

Agency

10 security checks (same as the one-off) for any of your or your clients’ sites
$3.50 per check instead of $5
Credits never expire — run checks whenever you need
Enter the first site right away, the rest via the link in the email
For every site — a PDF by email and a report in “My reports”

⏱ each check usually within 10 minutes👤 Web studios, freelancers and owners of several sites.

$35one time

Choose plan

🔔 Patch alerts — free for 1 site · Pro — $3 per month per site (soon)

Free for 1 site
Every 6 hours we match the site’s CMS, plugins and libraries against new vulnerabilities
We only alert on critical and high (CVSS 7 and above)
Alerts by email and in Telegram if you connect the bot
The site’s stack is passively refreshed once a week

⏱ checked every 6 hours👤 Owners of a CMS-based site who want to hear about urgent patches in time.

Connect for free →

What’s included

Check	$5	$19	$12/mo	$35
HTTPS, SSL certificate, TLS	Yes	Yes	Yes	Yes
Headers, cookies, exposed files and backups	Yes	Yes	Yes	Yes
Email and DNS: SPF, DMARC, DKIM, CAA, DNSSEC	Yes	Yes	Yes	Yes
Vulnerabilities (CVE) in CMS, plugins, libraries	Yes	Yes	Yes	Yes
Speed and Core Web Vitals	No	Yes	No	No
SEO crawl of up to 25 pages	No	Yes	No	No
AI business and UX review	No	Yes	No	No
SSL expiry watch for 30 days	No	No	Yes	No
Report format	PDF	PDF + HTML	PDF	PDF
Number of checks	1	1	1	10, no expiry
Usually ready	≤ 10 min	≤ 20 min	≤ 10 min	≤ 10 min per site

03 / FAQ

A few things you may wonder

Does this guarantee security?

No. The report describes potential risks based on public signals and does not replace a comprehensive security audit.

Do you need server access?

No. Just the website address and an email. Nothing to install on the site, no sign-up.

Can I check someone else’s site?

The check is passive: we look at the site like an ordinary visitor — public pages and DNS only, up to 90 ordinary requests, no attacks or password guessing. Before paying you confirm that you own the site or are entitled to order its check (for example, as the developer or the client’s agency); the consent is recorded with time and IP. No technical ownership verification is needed — optionally you can earn a “Verified” badge.

When can I get a report?

Right after payment the check starts automatically — the report is usually ready within minutes. The report link and PDF are emailed to you, and in this browser the report stays in “My reports”.

Questions? Write in Telegram @hitonoanzen or to [email protected]