AI makes attacks faster.
Find your weak spots first.
Check your website’s exposed security weaknesses. Get clear evidence, prioritized fixes, and instructions your developer or AI coding assistant can use.
€199 including VAT · One hostname · One consolidated report
Three steps
1 · Enter your hostname
Type your domain. We check the syntax and keep it safe while you create an account — nothing is scanned yet.
2 · Confirm scope & pay once
You confirm you own the exact hostname or have permission to test it. One payment of €199 including VAT. No subscription.
3 · Get the report & fixes
Watch the real assessment progress, then read prioritized findings with evidence — plus a fix file your coding assistant can use.
What we check — and what we don’t
One consolidated report. Every check is reported as executed, not applicable, skipped, blocked, failed or timed out — you always see honest coverage.
| TLS & certificates | Protocols, ciphers, certificate posture via a bounded testssl profile. |
|---|---|
| HTTP headers & cookies | Security headers, cookie flags, CORS and cache policy. |
| Known exposures | A curated, reviewed set of checks — no unrestricted template sets. |
| Public assets | Your site's own JavaScript and maps inspected for exposed secrets or versions. |
| Same-host rendering | Browser rendering of your pages with external requests blocked. |
This is an external, unauthenticated assessment. It does not guarantee a secure website and does not replace authenticated or manual testing.
Sample report Example
| ID | Title | Severity | Status |
|---|---|---|---|
| VDK-A1B2C3D4-01 | HSTS header not observed | low | potential |
| VDK-A1B2C3D4-02 | Cookie without Secure flag | medium | confirmed |
Example layout only — not real scan data. Every report includes evidence references, severity rationale, safe reproduction and fix advice per finding.
One price. One assessment.
One hostname · one consolidated report · PDF, HTML and a fix file for your coding assistant. Reports stay available for 12 months. A new assessment costs €199 again.
Scope, authorization & limits
What exactly gets tested?
The exact hostname you enter — for example ems.works, not www.ems.works and not any other subdomain. Only standard web ports 80 and 443. Cross-host redirects are recorded, not followed.
Do I need to prove I own the domain?
Not in this version: you attest that you own the hostname or have the owner's permission. Abuse controls — overlapping-scan locks, rate limits and immediate cancellation — protect targets while ownership verification is a planned future feature.
What is excluded?
Denial-of-service, destructive payloads, brute force, credential stuffing, data modification, form submissions and purchase flows are all excluded by policy.
Does 'no findings' mean my site is secure?
No. Automated external assessment has real coverage limits, which every report states plainly. It does not replace authenticated or manual testing.
Ready to check your website?
€199 including VAT · One hostname · One consolidated report.
AI makes attacks faster.
Find your weak spots first.
Check your website’s exposed security weaknesses. Get clear evidence, prioritized fixes, and instructions your developer or AI coding assistant can use.
€199 including VAT · One hostname · One consolidated report