Your website deserves better security.
Discover security risks, understand what matters, and take action with a clearer view of your website’s security. No scare tactics, no fake vulnerability counts.
What CheckWebSecurity Protects
Purpose-built checks for the attack surfaces of modern web setups — with the boundaries of each mode stated up front.
Small Businesses
Prioritized, plain-English findings for brand websites, customer portals, and storefronts — without enterprise complexity or consulting retainers.
WordPress Websites
Perimeter checks for exposed configuration and backup files, missing security headers, and debug-log exposure. File-level malware scanning requires host access.
WordPress checks arrow_forwardLaravel & PHP Applications
Host-agent and repository checks for exposed .env paths, debug-mode leakage, insecure storage permissions, and dependency inventory from composer.lock.
Other Modern Stacks
Repository analysis for Node.js and Python projects (lockfile and manifest checks), and external perimeter checks for any verified web target.
Three-Step Process: Connect → Scan → Understand
Security intelligence without invasive setup or code modifications.
Connect & Prove Ownership
Register your domain or repository target, then verify control of it with a DNS TXT record or an HTTPS well-known token.
Adding a target does not authorize scanning — nothing runs without verified ownership.
Run Non-Destructive Checks
Choose the mode that fits your access: a read-only host agent, repository/manifest analysis, or external perimeter checks.
Probes are passive, rate-limited reads — we never run aggressive exploits or load tests.
Understand & Remediate
Findings are translated into plain English with exact, copy-paste configuration fixes for your engineers.
Sensitive values in evidence are redacted before they are stored.
Start free, continue with Starter
A 7-day evaluation with one website slot. Starter keeps your target monitored at $20/month.
Free Trial
$0 / 7 days
- check 1 website slot
- check Guided ownership verification
- check Available assessment modes for your stack
- check Plain-English remediation guides
- close On-demand re-scans after trial expiry
Starter Plan
Most Popular$20 / month
- check 1 actively protected website
- check On-demand manual re-scans
- check Full findings dashboard
- check Complete scan history
- check Email alerting on new findings
Honest Security & Trust Philosophy
We operate on technical integrity, not scare tactics or artificial vulnerability counts.
Non-Destructive Scanning
All assessment requests are passive and read-only. We never execute aggressive exploits or heavy load tests.
Verification First
No scan runs against a target without verified ownership via DNS or HTTPS proof. We strictly prohibit unauthorized probing.
Tenant Data Isolation
Your scan results and target domains are isolated per tenant. Telemetry is never indexed for public search or sold.
No Inflated Findings
We reject inflating benign observations into “critical”. If an issue is flagged, it was actually detected on your target.
Frequently Asked Questions
How does the scan work? Will it slow down my website?
Assessment probes are passive, read-only HTTP/HTTPS requests with built-in rate limiting. They operate with negligible impact on your server and will not cause slowdowns or downtime.
How do I prove domain ownership?
Two ways: add a custom DNS TXT record through your registrar, or place a short verification token file under /.well-known/ on your server.
What happens when the 7-day trial ends?
Since no credit card is required, your account simply transitions to read-only mode: you keep your findings and history, but new scans pause unless you move to the Starter plan ($20/mo).
Can I scan multiple websites or subdomains?
The trial and the Starter plan each cover 1 website slot. If you need coverage for agency portfolios or multi-tenant architectures, contact us — additional slots can be arranged as you grow.
Instant Baseline Protection
Start understanding your website’s security today — join the teams catching exposures before attackers do.
Start 7-Day Free TrialOne website slot included • No credit card required • Ownership verified before any scan