| What it does | Website hygiene scoring for HTTPS, headers, cookies, and privacy
| AI security agent that finds vulnerabilities in AI-built apps, prepares fixes, and verifies the live app after deployment
|
|---|
| Stage | Not given
| Startup
|
|---|
| Founded | Not given
| 2026
|
|---|
| Based in | Not given
| US
|
|---|
| Pricing model | Freemium
| Free trial
|
|---|
| Pricing | Free scan: $0 with score, letter grade, and structured findings. Full report: $12 with written brief, DNS records, mail-authentication, CAA and DNSSEC, 30-day plan, and export options.
| Free scan with no card required. 7 days free trial with card, then $80/month USD. One organization with up to three included full-access people. $20/month per additional full-access person.
|
|---|
| Key features | - Scores website public hygiene and security configuration
- Checks HTTPS, headers, cookies, and third-party resources
- Analyzes DNS records including DMARC, SPF, DNSSEC, MX, NS, and CAA
- Free scan with score and letter grade
- Paid report with written brief and 30-day remediation plan
- Copy-paste fixes for nginx, Apache, and Cloudflare
- Eight free scans per day per network
- No private network or RFC1918 scanning
- Export in PDF, Markdown, or print format
| - Continuous attack-surface mapping of exposed endpoints, services, and certificates
- Vulnerability investigation with confirmed evidence and real impact explanation
- Automatic fix pull requests on separate GitHub branches
- Live verification that vulnerabilities are actually closed after deployment
- Team notifications via Slack, Discord, and email with weekly summaries
- Detection of exposed endpoints, leaked keys, open buckets, and injection paths
- Domain ownership verification via DNS TXT record
- Live retest to confirm vulnerability closure after fix deployment
- Plain-English vulnerability titles with technical details in records
- Multi-domain support on single surface map
|
|---|
| What makes it different | - No Cloudflare login required to scan
- AI-generated written brief on paid reports
- Email address and payment details never shared with language model
- 30-day action plan with exact fixes for each finding
| - Verifies vulnerabilities are actually fixed by testing the live deployed app after fixes ship
- Prepares actionable fix pull requests you review and control before deployment
- Designed specifically for AI-built applications that ship vulnerable code by default
- Continuously monitors your changing app surface and checks again automatically
- Shows evidence behind every finding so you can verify the work yourself
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ▼ −2 (down) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 2 | 6 |
|---|
| Citation Flow (Majestic) | 28 | 21 |
|---|
| Referring domains (Majestic) | 0 | 4 |
|---|
Iron Check
Zoltra