WebGuard AI is an online website security scanner. In under a minute it runs a passive audit of any website — SSL/TLS certificate, HTTP security headers, DNS and email authentication (SPF, DKIM, DMARC), exposed files, subdomains and vulnerable software (CVEs) — then writes a plain-language report with a prioritised fix plan.
Scan my website · Pricing: Website Security Report from €12
Enter your site address on WebGuard AI and start the scan. In 10 to 40 seconds the scanner checks 12 areas — SSL/TLS certificate, HTTP security headers, SPF/DKIM/DMARC, exposed files, subdomains, vulnerable software and more — and gives a security score out of 100. Free scans: up to 5 a day, no credit card required.
A passive scanner only looks at what a website exposes publicly, the way a visitor would: certificate, HTTP headers, DNS records and reachable files. It sends no attack payloads, so it is safe to run on a live production site. It does not replace a penetration test, which looks for SQL injection, XSS or authentication flaws.
SSL/TLS and HSTS, nine HTTP security headers with quality checks (CSP, X-Frame-Options, Referrer-Policy…), SPF, DKIM, DMARC and DNSSEC, exposed files such as .env or .git, subdomain takeover, outdated software with known CVEs, cookie flags, CORS, secrets in page source, robots.txt and security.txt, and Subresource Integrity.
No. The tool only reads what your site makes public, like a visitor. It sends no attack payload and makes a small number of ordinary requests.
You must own the website or have its owner's permission. You are responsible for the scans you run.
The overall score and the list of every issue are free, with fixes for the 3 most serious. A full report — every issue with its fix, the AI-written report and the PDF export — costs €12, or €49 for 5 reports and €149 for 20. One-time payment, no subscription, and credits never expire.
The fixes with the biggest impact are usually: serve everything over HTTPS with HSTS, add a Content-Security-Policy, publish SPF, DKIM and DMARC records, remove sensitive files (.env, .git) from the web root and update outdated software. The WebGuard report ranks every fix by urgency.