Free scan
Check your vulnerabilities.
One URL, no card. Prove you own the site with a quick DNS or file check, then we scan it, all the way from passive recon to non-destructive active tests. You stay in control of how far it goes.
Welcome back
Log in.
Pick up where you left off, and see your report.
Scanning
Download the PDFWhere the exposure sits
What we're checking
Since your last scan
How we decide what is new to you
Findings
- Findings appear here as they are confirmed.
What we checked
Every check this scan ran on your site, area by area. Each row names a risk we went looking for, so a check that passed is one we ran and found nothing. Open an area to read them.
How we ran this, and what the words mean
We scanned only the server you proved you control. The whole assessment is non-destructive: we read, we probe, and we stop the moment a hole is proven. We do not extract your data, change it, or leave anything behind.
potential
We saw the signature of the hole. We did not push on it.
confirmed
We proved it is real and reachable, without touching your data.
exploited
We performed the attack ourselves, non-destructively, and captured what it gave up.
An autonomous attacker probes your site and a separate frontier model reviews every claim against the raw evidence before it reaches this page. That review can confirm a finding; only our own check can mark one exploited, and it does that solely when it performed the attack and captured what came back. Where you see exploited, it happened.
Which platform is this site running on?
Your fix list
Walk through a confirmed hole
Where we have already confirmed a hole, we can push one step further and reach a single harmless fact through it — a database version, an answer that can only be yes or no — so your report says we walked through it. Nothing is written and nothing of yours is read.
Run the scan again
Remediation record
Fix my site
Connect a repository and we open a pull request with the fixes. We never merge it for you, and we never push to your main branch. You review and merge what you want.
We read your code, work out the change and show you every line of it. Nothing is charged and nothing is opened until you have read the diff.
Your dependencies
Stay defended
Frontier attackers do not wait for your next audit, so re-run this scan on a schedule. We recommend running overnight.
Account
Your account.
Everything you have paid us for, the invoice for each one, the business details that go on them, and your password.
What you have paid
Every payment on this account, newest first, with the invoice for each one.
| Date | What it bought | Amount | Status | Invoice |
|---|
You have not paid us anything yet. The scan is free, so there is nothing here until you unlock a full report or buy a fix. When you do, the payment and its invoice appear on this page straight away.
An invoice that says Not issued yet is being prepared and will appear on this page.
A payment that did not complete stays here until its checkout link expires. Nothing was charged for it.
Password reset
Reset your password.
Tell us the address on your account and we will email you a link. The link works once and it expires in 30 minutes.
Password reset
Choose a new password.
This link works once. When you have set the password we will sign out every browser on this account, so sign in again with the new one.
Checking the link.
Your password is set, and every session on this account has been signed out. Sign in with the new password.