| What it does | Website hygiene scoring for HTTPS, headers, cookies, and privacy
| Open-source security for AI coding agents
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| GR
|
|---|
| Pricing model | Freemium
| Open source
|
|---|
| Pricing | Free scan: $0 with score, letter grade, and structured findings. Full report: $12 with written brief, DNS records, mail-authentication, CAA and DNSSEC, 30-day plan, and export options.
| Open-source sensor is free. Enterprise pilot for up to 25 developer seats starts with a 90-day design-partner pilot, scoped with you.
|
|---|
| Key features | - Scores website public hygiene and security configuration
- Checks HTTPS, headers, cookies, and third-party resources
- Analyzes DNS records including DMARC, SPF, DNSSEC, MX, NS, and CAA
- Free scan with score and letter grade
- Paid report with written brief and 30-day remediation plan
- Copy-paste fixes for nginx, Apache, and Cloudflare
- Eight free scans per day per network
- No private network or RFC1918 scanning
- Export in PDF, Markdown, or print format
| - Records tool calls from Claude Code, Cursor, Codex, GitHub Copilot and other agents
- Detects risky sequences and agent behavior patterns
- Forwards to SIEM: Splunk, Elastic, Microsoft Sentinel, Google SecOps
- MCP server scanning to detect risky or malicious integrations
- Works on Windows, Linux and macOS without kernel driver
- DLP integration to prevent credential and sensitive data exfiltration
- 0 false positives across 57 test cases with MITRE ATT&CK coverage
|
|---|
| What makes it different | - No Cloudflare login required to scan
- AI-generated written brief on paid reports
- Email address and payment details never shared with language model
- 30-day action plan with exact fixes for each finding
| - Hash-chained records can be verified offline, catching any tampering or editing attempts
- Sees which AI agent ran the command and the session it belongs to, unlike EDR tools
- No account required, no telemetry sent until you configure a sink
- Single maintainer, self-funded, built in public with no hidden development
- All claims on the website verifiable by running commands on your own machine
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ▼ −2 (down) since last check | 36 ● no change since last check |
|---|
| Trust Flow (Majestic) | 2 | 5 |
|---|
| Citation Flow (Majestic) | 28 | 18 |
|---|
| Referring domains (Majestic) | 0 | 45 |
|---|
Iron Check
Agentmetry