Website hygiene scoring for HTTPS, headers, cookies, and privacy
Find and prevent secrets and prompt injection attacks in AI coding agent sessions
Stage
Not given
Not given
Founded
Not given
Not given
Based in
Not given
Not given
Pricing model
Freemium
Open source
Pricing
Free scan: $0 with score, letter grade, and structured findings. Full report: $12 with written brief, DNS records, mail-authentication, CAA and DNSSEC, 30-day plan, and export options.
Not given
Key features
Scores website public hygiene and security configuration
Checks HTTPS, headers, cookies, and third-party resources
Analyzes DNS records including DMARC, SPF, DNSSEC, MX, NS, and CAA
Free scan with score and letter grade
Paid report with written brief and 30-day remediation plan
Copy-paste fixes for nginx, Apache, and Cloudflare
Eight free scans per day per network
No private network or RFC1918 scanning
Export in PDF, Markdown, or print format
Scan recorded AI agent sessions for known credentials
Guard against prompt injection attacks
Local console with audit trails at 127.0.0.1
Support for multiple AI coding agents including Claude Code, Cursor, and Codex CLI
Default policy with 21 rules across 19 action classes
Test policy against replayed attack scenarios
No model or network in the guard's hot path
What makes it different
No Cloudflare login required to scan
AI-generated written brief on paid reports
Email address and payment details never shared with language model
30-day action plan with exact fixes for each finding
Deterministic policy-based enforcement rather than model-based decisions
Runs locally with no telemetry and no account required
Open source and free forever under Apache-2.0
Replayed 36 real attack scenarios with zero bypasses
Iron Check
Stroq