We read what a browser sees
One page load and one secure handshake: the padlock, the response headers, your public DNS, and the software versions your pages announce about themselves.
Is your website running software with a known critical bug?
Type your address. In about thirty seconds you get the recent critical bugs for the software your site runs, the exact fix for each, and the smaller things worth tidying, all in plain English.
Already know your software or package version? Check it directly.
- Free, no sign-up
- Only what a browser already sees
- No attack traffic, ever
How it works
Three steps, nothing installed, nothing touched on your server.
We compare with public databases
Recent critical advisories, the National Vulnerability Database, OSV.dev, Wordfence for WordPress plugins, and end-of-life dates. Every finding says how sure we are.
You get the fix, in plain English, free
Each problem comes with what it means and exactly what to do. Stuck? Leave your email and a person helps you fix it, free.
What we never do: send attack traffic, guess passwords, probe hidden paths, or go deeper into a site without its owner's written permission.
See a sample report
What you type, what we find, and exactly what to fix, on a made-up shop site.
sample-shop.example, a made-up site. Your report shows your own software and the fix for each finding.Facing a problem with any of this?
Leave your email and a person helps you fix it, free. We already have your site and your report, so that is all we need.