Ranked by what matters
Findings are sorted by real-world severity, so you fix what an attacker would reach first, not what a scanner shouted loudest about.
Back to all services
Offensive · we try to break in
Website Security Audit
A security audit answers one question: how far could someone actually get into your website? Pick the depth you need — from a quick automated scan to a full test done by hand.
Free · automated
Surface Scan
Free/ one site you own
A quick, lightweight automated look from the outside — the same check we run every day for paying sites.
- Every piece of software we can see, and what's out of date
- Known security holes matching what you run, ranked by severity
- Pages and files left open that shouldn't be
- A short plain-English verdict within one working day
Best value · automated
Deep Scan
$149/ per site, one-off
A thorough automated audit that goes past the surface — authenticated scanning, more checks, and a report you can act on.
- Everything in Surface Scan, run much deeper
- Logged-in scanning — we test the parts only your users see
- Common web weaknesses checked: injection, XSS, misconfig, weak auth
- Findings ranked by severity, each with a clear fix
- A written report you can keep or hand to a developer
Manual + automated
Full Pentest
From $899/ per site, one-off
A real person tries to break in by hand — the way an attacker would — on top of the automated pass. The deepest look we offer.
- Everything in Deep Scan, plus hands-on manual testing
- Business-logic flaws automation can't catch
- Login, permissions, forms and checkout tested by hand
- Proof-of-concept for each finding, so nothing is theoretical
- A full report and a call to walk you through the fixes
Only sites you own, or ones you're allowed to test. We confirm ownership before any deeper testing begins.
What you get
One Report. Plain Fixes.
Whichever level you choose, the output is the same shape: what we found, how bad it is, and exactly what to do about it — no jargon dump.
A fix for every finding
Each issue comes with the specific change to make. If you have a developer, they can act on it straight away. If you don't, we can do it for you.