Free while in beta

Full audit

Everything we can check from outside, in one report that explains what to fix first. Most audits finish in under a minute.

Audits are read-only. See exactly what an audit does. Just want to know about this week's attacks? Run the quick threat check. Your past audits are here.

What's included

Vulnerable softwareIdentified versions looked up in OSV.dev during the scan
Hijacked packagesScripts matched against malware advisories and tracked incidents
HTTPS and certificatesRedirects, certificate trust and expiry, outdated TLS
Headers, cookies and formsMissing protections and insecure settings
Exposed files and leaked keysPublic .git and .env files, credentials in page source

Every finding comes with its evidence and a suggested change you can pass to your developer.