Monitoring
One scan tells you about today. Sites break on deploy day — a header disappears when a config is rewritten, a certificate lapses because renewal quietly stopped, a key lands in a bundle. We re-scan weekly and email you only when something is actually different.
You will need to prove the domain is yours. Monitoring includes the checks that probe unlinked files, so it only runs once a proof passes. We email you one DNS record or one file right after you sign up, check every hour, and start the moment it passes.
Credentials appearing in your JavaScript · files becoming reachable that should not be · database ports opening to the internet · admin surfaces answering without a login · certificate expiry and validity · HTTPS enforcement, HSTS and CSP · noindex and robots changes · source maps appearing · debug output on error pages · new third-party services · subdomains pointing at nothing.
A weekly email saying nothing happened. We only write when something changed. Silence is the normal state and it is the point — an alert that arrives every week is one nobody reads.
Cancel any time from the link in your payment receipt. Cancelling stops the scanning and the billing together.