Outdated dependencies, APP_DEBUG in production, missing rate limits, a full disk,
silent spikes in error logs — find them before someone else does.
The free scan looks from the outside. Signing up adds a lightweight agent that checks from inside your server, on a schedule.
SSL certificate expiry, missing security headers, exposed .env / .git files, and response time — no login required.
Paste your composer.lock to check every package against known CVEs and security advisories.
APP_DEBUG, disk/RAM/swap usage, rate-limit configuration, and error-log spikes — checked from inside your server via a small cron agent.
Enter your domain above and get an instant external report — no account needed.
A single zero-dependency PHP file, dropped on your server and run via cron every 15 minutes.
We email you the moment a new critical finding shows up, so you can fix it before it becomes an incident.
Simple, flat pricing. No per-server fees.
$0
$19/month