Known vulnerabilities
Outdated components, exposed admin panels, common misconfigurations and public advisories that match what your site actually runs.
CHROME EXTENSION · COMING SOONKnow what your
Know what your
website exposes.
Open your own site, press one button, and get a plain-language report: known vulnerabilities, exposed services, leaked credentials and databases — then automatic monthly rechecks that tell you when something new appears.
One website free · extra targets paid via the bot · built for small business owners
extension scan1 target · monthly
YOU
Check my website
Scan: mysite.examplerunning on our servers
●- 01
Verify you own the domain
✓ - 02
Check attack surface and known vulnerabilities
✓ - 03
Search leaks: credentials, databases, configs
✓ - 04
Report + monthly recheck scheduled
✓
↳ Result: a ranked list of what to fix first
◈ — on the waitlistIllustrative · not a live scan
↳ No technical setup↳ Plain-language report↳ Monthly rechecks
WHAT IT DOESOne button.
One button.
A clear answer.
Designed for owners and managers, not for security teams. You get findings ranked by risk, with what to tell your developer or hosting provider.
Attack surface
Open ports and services, forgotten subdomains, staging environments, exposed files and directories that should not be public.
Leaked credentials
Email addresses and passwords from your domain that appear in public breach collections, so you can force a reset before someone else does.
Leaked databases
Checks whether data that looks like your site's database or config has surfaced in public dumps and paste sites.
Monthly rechecks
After the first scan the target is rechecked automatically. You are alerted only when something new or worse appears.
Report you can act on
Each finding states what it is, why it matters for a small business, and the concrete next step — fix, ask your host, or ignore.
HOW IT WORKSThe extension is the interface.
The extension is the interface.
The scanning is ours.
Everything runs on our servers, so results are consistent and do not depend on your computer being switched on.
Install the extension and open the website you own.
Prove control: the extension gives you a verification file or DNS record to place.
Our scanners run the check from the outside — the same way an attacker would see your site.
You get a ranked report in the extension and in the bot.
The target is rechecked monthly; alerts arrive only on meaningful change.
Only websites you can prove you own can be scanned. This is an owner's tool, not a service for testing third parties.
WAITLIST
Be first when it ships.
Leave a signal and we will count you in. One website free; extra targets and deeper scans will be available through the bot.
01 / JOIN
02 / WHAT YOU GET
• one website scanned free
• plain-language findings, ranked
• monthly automatic rechecks
• alerts only on real changes
• extra targets via the bot— owners are already waiting. Counting is anonymous and daily; no personal data is stored.
Practical answers
Do I need technical knowledge?
No. You install the extension, open your site and press one button. The report is written in plain language and ranked by what to fix first.
Does the scan run inside my browser?
No. The extension is only the interface. Scans run on our servers so they are consistent, repeatable and independent of your machine.
Can it scan a website I do not own?
No. You must prove control of the domain, for example with a verification file or DNS record. This is a tool for owners.
What does it cost?
One website is free, including monthly rechecks. Additional targets and deeper scans are paid through the Pentest2Bot bot.
When is it available?
It is in development. Join the waitlist and you will be notified when the Chrome Web Store listing opens.
Your site,
checked like an attacker would.
Join the waitlist and get one website checked for free when we launch.