Starter
100 credits
990 ₽one payment
- 01
- ₽9.90 per credit
- 02
- Valid for 365 days
- 03
- No auto-renewal
A pack does not change your plan or unlock Pro tools.
Available payment methods are shown after sign-in.
Continue to purchaseThe hundred-eyed watchman never sleeps
See what others miss.
The service continuously checks your website and servers for weak spots — the way an attacker would, only safely. Everything it finds lands in one list: the most dangerous items on top, each with a plain explanation and a way to fix it.
Signals from every part of your internet presence — the site and its subdomains, pages and forms, servers, cloud storage, network services and domain records — converge at the center, where the service finds weak spots and sorts them by type: foreign code, database attacks, known vulnerabilities, dangerous settings, and accidentally exposed passwords and keys.
Three zones of defence
Compliance, security and recon — in one place
Three clear directions of work. Start with a compliance check — and see your site's security and the map of your own perimeter along the way.
Russian law · 152-FZ
Check your site against 152-FZ
betaCookie banners, your personal-data policy, data-collection forms, where the data is stored — we show what's already fine and what to fix. In plain words, with a pointer to the exact clause of the law.
Beta: help getting ready for a review, not a legal opinion.
Security
Find weak spots and leaks
We check your site the way an attacker would: where someone could get in, what's set up unsafely, whether data has leaked. You get a clear, prioritised list back.
Recon
A map of your perimeter
We gather everything visible from outside: domains and subdomains, who owns them, open doors to the internet. You see what your site is really made of — often more than you'd expect.
How it's built
One careful walkthrough of everything visible from outside
Every checkup looks at your website and servers through a stranger's eyes: what's open, what's outdated, where someone could get in. Duplicate findings are merged, each one gets a danger level — you read a ready, sorted list.
2 minto first results
100+kinds of checks
9report formats
180days of finding history
0installs on your side
Checkup
Dozens of automatic checks carefully sweep the address you've proven you own — from a general walkthrough to safely reproducing an attack.
Overview
The service maps everything visible from outside on its own: subdomains, pages, services — and works out which technologies run where and what looks vulnerable.
Assessment
Identical findings from different checks merge into one. Each is matched against global databases of known vulnerabilities and real-world attack statistics — that's how its true danger is determined.
Fix
Every finding comes with a plain recommendation. For simple cases the AI assistant can draft a ready code fix — your developers review it and accept it.
Checks
Dozens of checks in one place
Each check has its own job: some look around, some hunt for weak spots, some carefully confirm the danger. All come from a single catalog — nothing is listed that doesn't actually work.
Example: findings from Website checkup, Software interface check, WordPress checkup that point to the same problem are merged into one.
11 tools
Outside look
First, the map: which sites, addresses and services are visible from outside at all, and what anyone can learn about you from public sources.
15 tools
Weak-spot search
The core of the service: checks that hunt for known vulnerabilities, outdated software, dangerous settings and leaks.
Website checkupSoftware interface checkWordPress checkupDrupal checkupJoomla checkupSharePoint checkupWeb server checkupsoonNetwork checkupWeak password checksoonEncryption checkOpen cloud storageServer cluster checkupCloud settings check (Amazon)Cloud settings check (Google)Cloud settings check (Microsoft)
5 tools
Real-world proof
Safe confirmation only: we show a weak spot is real without causing harm or taking data. Works only on assets you've verified as yours.
3 tools
Handy tools
Working tools around the checkup: domain background info, availability checks, scheduled runs.
What happens to findings
Four things the service does for you
Not a decorative picture — this is how every finding is processed.
01
Duplicates get merged
Findings from Website checkup, Software interface check, WordPress checkup that point to the same problem merge into one — no duplicates, no noise.
02
Dangerous rises to the top
A scary name isn't what matters. The service checks global statistics — which vulnerabilities attackers are using right now — and those findings rise straight to the top.
03
Alerts where it suits you
A simple rule like “only tell me about serious issues” decides where the news goes: Telegram, email, or straight into your work tools.
04
A report in the right format
A PDF for the boss, a spreadsheet for the analyst, technical formats for developers — nine formats in one click. Branding it with your logo is an optional extra.
How it works
Check. Prioritize. Fix.
Nothing to install. Confirm the asset is yours — then read a ready list: what was found and what to do about it.
01
Check
Point the service at a website or server you own. It carefully looks it over from outside — the way an attacker would, only without the harm.
02
Prioritize
Every finding is matched against global attack statistics: whatever attackers are using right now ends up at the very top of the list.
03
Fix
Read the plain recommendation — or let the AI assistant draft a ready code fix. It goes to your developers for review: you accept every line yourself.
Repair
From a finding to a ready fix
Every recommendation is written in human language. For simple cases the AI assistant drafts a code fix on its own — you decide whether to accept it.
Priorities
The only color that means something
Color is used for exactly one thing here — showing how dangerous a finding is. Every level is labeled in words, so the list reads fine without color too.
Low
Recorded and tracked — almost no real threat.
Medium
Worth scheduling a fix in the near future.
Critical
Fix first: attackers are already using this.
Attack likelihood — using global statistics, the service estimates how likely it is that a vulnerability will be attacked within the next month.
Already in use — if a vulnerability has already been spotted in real attacks, it stops being theory — and rises straight to the top of the list.
Trust & safety
Built to the same standards we check you against
We apply to ourselves what we look for in others. Separated client data, control over every action and careful treatment of your assets — that's how the service is built, not checkboxes in settings.
Client data is separated
Every client's data is stored in isolation: one company can never see another's findings — the restriction is built into the lowest storage layer.
A checkup can't turn inward
The service checks only what you point it at, and technically cannot use a checkup to reach into internal networks — neither yours nor ours.
Every check runs in isolation
Checking tools run in sealed sandboxes with minimal permissions: even if one check fails, nothing else is affected.
Notifications can't be forged
Every message from the service carries a protective signature — your systems can verify it really came from us and wasn't altered along the way.
Verified assets only
Deep checkups start only after you prove the asset belongs to you. Pointing the service at someone else's site won't work.
History can't be rewritten
Every action in the service is recorded once and forever — a log that can't be doctored after the fact.
Data isolationSafe checkupsOwnership verificationTamper-proof log
Questions
Before you start
Do I need to install anything?
No. You give the address of a website or server you own — the service looks at it from outside. Nothing to install or configure on your side.
What's in the free plan?
A site walkthrough and encryption check: 10 checkups a month, 2 assets, 30-day finding history. No card, no calls. Full vulnerability search starts with the Pro plan.
How do you decide which finding matters more?
By real danger. The service checks global statistics on which vulnerabilities attackers are using right now — those findings rise to the very top of the list.
Can I check someone else's website?
No. Deep checkups only start after you confirm the asset belongs to you. The confirmation itself is a simple procedure that takes a couple of minutes.
Can a checkup break something?
The service runs in a safe mode: it confirms a weak spot exists but never uses it to do harm — it changes nothing and takes no data.
Can the AI fix a finding by itself?
For simple cases the AI assistant drafts a code fix — only with your permission. Your developers review and accept every line; it never changes anything on its own.
Pricing
Start free. Grow with us.
Choose continuous protection with a subscription or a one-time reserve of scan credits. These are two independent ways to use the service.
01 / Subscription
Subscription
For continuous coverage: a monthly checkup allowance, plan features and regular renewal.
Free
Free
- — Site walkthrough and encryption check — no card
- — 10 checkups a month, 2 assets
- — 30-day finding history
- — AI assistant included
Popular
Pro
4 900 ₽ / month
- — Everything in Free
- — Full vulnerability search
- — 100 checkups a month, 25 assets
- — 180-day finding history
- — 2 checkups at once
Enterprise
Custom quote
- — Everything in Pro
- — Unlimited checkups, assets and history
- — 8 checkups at once
- — Multiple workspaces, team roles
02 / One-time purchase
Scan credits — no subscription
For occasional runs and peak workloads. These credits power checkups; they are not AI assistant units.
Standard
500 credits
4 490 ₽one payment
- 01
- ₽8.98 per credit
- 02
- Valid for 365 days
- 03
- No auto-renewal
A pack does not change your plan or unlock Pro tools.
Available payment methods are shown after sign-in.
Continue to purchasePower
1,500 credits
11 990 ₽one payment
- 01
- ₽7.99 per credit
- 02
- Valid for 365 days
- 03
- No auto-renewal
A pack does not change your plan or unlock Pro tools.
Available payment methods are shown after sign-in.
Continue to purchaseSee what others miss.
The free plan works from the first minute. No card, no calls, nothing to install.