Enter a URL and get a list of the vulnerabilities your website exposes publicly, ranked by severity, with the exact fix for each one. Passive scan, no installation, results in under a minute.
WebGuard AI fingerprints your server, CMS and JavaScript libraries (Apache, nginx, PHP, IIS, WordPress, Drupal, Joomla, jQuery, OpenSSL) and matches the versions it detects against known CVEs and end-of-life releases.
The scanner checks sensitive paths such as .env, .git/config, wp-config.php, phpinfo pages and SQL dumps or backup archives, and looks for API keys and tokens (AWS, GitHub, Stripe, Slack) left in the page source.
Each scan also reviews the TLS certificate, HTTPS redirection, HTTP security headers, cookie flags (Secure, HttpOnly, SameSite) and CORS policy, the configuration issues most often found on production sites.
Every finding comes with a severity, an explanation in plain language and the configuration change that fixes it. The AI-written report sums up the risk and the first actions to take.
Yes. The scan is passive: it only reads what your website already exposes publicly and sends no attack payloads, so it cannot break or slow down a production site.
No. It finds configuration weaknesses, outdated software and exposed data quickly. It does not test for SQL injection, XSS or authentication flaws, which require an authorised penetration test.
The scan is free (up to 5 a day, no credit card). The full detailed report costs €12 once, with no subscription.