The loop
Observe, remediate, prove.
Every finding carries its own proof, names the owner of the fix, and is closed only when the same deterministic check passes again.
ObserveDaily deterministic checks on DNS, TLS, HTTPS behaviour and browser security headers for every verified property. Repeated observation before an alert, so drift is not noise.
RemediateEach observation becomes an assignable task with provider-specific steps, a plain statement of impact, and the option to accept a risk with a documented review date.
ProveA fix is verified only when the same rule passes again, with before-and-after evidence attached. AI never closes a finding.
Priced by portfolio, not by scanner depth.
Every paid plan buys the same detection contract. What changes is how many properties it covers and how long history is kept.
Public Snapshot
A one-off hygiene check before you commitGet started free
- One canonical hostname
- DNS, TLS, HTTPS redirect and selected headers
- Plain-English fix guidance
- No monitoring, no history, no vulnerability claims
Value
Studio
For small studios maintaining a handful of client sitesChoose plan
- 10 verified properties
- Daily deterministic posture checks
- Change detection and verified retests
- Hosting-aware remediation steps
- Monthly client evidence summary
Popular
Agency
For agencies running client care plansChoose plan
- 50 verified properties
- Teams and per-client access
- White-label client evidence
- Webhook and email notification policies
- 12 months of structured history
Portfolio
For larger portfolios and multi-brand operatorsChoose plan
- 200 verified properties
- Longer structured history
- Bulk property onboarding
- Portfolio-wide exports
- Priority product support
These checks describe what our deterministic rules observed at a point in time, and whether those observations changed after a fix. They do not prove a website is secure, do not certify compliance with any standard, and are not a penetration test.