How it works

1. 1

   Enter your website

   Paste the public address of a site you own or have permission to test.

2. 2

   We run real checks

   Our server requests the page (no cookies, no logins), follows up to 5 redirects and records status, headers, HTML basics, robots.txt, sitemap.xml and — on expanded scans — up to 10 links.

3. 3

   Credits are charged once

   A basic scan costs 2 credits, expanded 5. If the scan fails on our side or the site can't be reached, the credits are refunded automatically.

4. 4

   Read the findings

   Each finding shows severity, the actual evidence, why it matters and what to do. Missing hardening headers are recommendations, not proven vulnerabilities.

5. 5

   Generate a repair prompt

   Get a prompt tailored to the finding to paste into Lovable, Bolt or Replit. It's written by AI when available, or from an evidence-based template (clearly labelled).

6. 6

   Re-scan and compare

   After fixing, run a new scan; the report shows which findings were resolved since your previous scan.