Free baseline. Paid depth.

Every scan runs every check so the letter grade is honest. Free users see full evidence for the basic scan (React2Shell, headers, TLS, well-known files). Pro findings show real titles and severity with evidence locked. Unlock one report for €9, or go Pro for €19/month.

Free

€0

Basic scan, forever

· Unlimited public URLs (rate-limited)
· React2Shell (CVE-2025-55182) — full evidence
· Security headers, TLS, well-known exposures
· Honest A–F grade (includes Pro issues)
· Shareable report link

Pro

€19/mo

Or €9 to unlock one report

· Everything in Free
· Cookie flags, CORS, CSP quality, mixed content
· JS library versions, CMS fingerprint
· SPF / DMARC, leftover backups, source maps
· CVE-2025-29927 middleware check (homepage only)
· Full evidence + webmaster email packet
· 60 scans / day

FAQ

Is the grade fake on the free report?: No. Pro issues lower the grade even when evidence is locked. We will not show an A that becomes an F after payment.
What does unlocking a report do?: That shareable URL stays fully visible forever, so you can send it to a webmaster. It does not raise your scan quota.
Do you exploit the site?: Never. Detection only: HTTP, TLS, and DNS. No shell commands, no dumped secrets.