Cyber insurance or vendor review
Use the $49 Trust Scan when a broker, vendor, or client asks for a basic website/security assessment you can forward.
Insurance page Website security checks
A website security report you can actually forward.
I run an outside check on your website, then turn the findings into a short, ranked report you can send to your broker, web person, vendor, or IT contact. No fearmongering, no 40-page PDF.
Forwardable to brokers and web peopleWritten for owners, not codersCopy-paste fix instructions
From The ScopeThe trust check for small business websites.
Start with the reason someone asked.
Most owners do not need a security lecture. They need a clean answer to a specific trust problem.
Web agency handoff
Add a plain-English trust/security report to client launches without building a security practice inside the agency.
Agency pageFree scanner confusion
Free tools are useful. From The Scope turns their raw warnings into a ranked fix list a business owner can understand.
Compare optionsFree, 30 secondsSee for yourself.
Scan my website freeRun the free scan on your own website. It takes about 30 seconds and you don't need an account or an email address. You'll see what's exposed from the outside, instantly.
What gets checked
An industry-standard methodology, written in plain English.
Every report covers the checks below using industry-standard scanners. Anyone can run a tool. The work is reading the output, separating noise from what actually puts your business at risk, and writing fixes your web person or IT can apply the same day.
You don't need a 40-page pentest PDF. You need to know what to fix first.
Most security firms hand you a binder of CVE numbers and risk matrices, then disappear. I send you a one-page summary, a ranked list of findings, and the exact words to forward to your web person or IT.
The customer view
What a visitor and their browser actually see: the trust signals, the warnings, the small details that quietly make someone leave.
Trust signals
SSL config, security headers, exposed APIs, CORS issues, broken redirects, and anything that triggers a browser warning or kills trust.
Your fix list
Ranked by severity, with a copy-paste "send this to your web person or IT" box for every finding.
What you actually get
The report is the proof.
A two-minute summary written for the owner, not the CTO
Findings ranked by business impact, not CVE score
Mobile and desktop walkthrough, since that's where customers live
A ready-to-send fix for every finding, with the exact change to make
What the scan caught on this site
The short version
Security headers are missing, the URL keeps flipping between www and non-www, the phone number's hard to tap on mobile, and the menu is a stale PDF. Most visitors on a phone won't stick around long enough to call.
Send this to your web person or IT
Pick one HTTPS domain and redirect everything to it. Replace the PDF menu with a real web page. Add a sticky call/order bar on mobile.
Questions people ask before buying
Short answers. No fine print.
How fast will I get the report?
24 to 48 hours, usually. If I have room in the queue, I can often turn it around same day.
Do you need my password or admin login?
Nope. I only check what a regular visitor and the browser can already see from outside.
What if my site is mostly fine?
You still get the report. It'll say so, point out the polish items, and skip the made-up problems. I'd rather you trust me with the next one than oversell this one.
Is this a pentest?
No. It's a quick outside look. If you need something that actively tests your defenses, the Deep Audit is a different service with a signed scope agreement before any work starts.
Need more than a quick look?
See the Deep Audit →The Deep Audit actively tests your site's defenses, manually verifies every finding, and gives you proof. $349 for a standard single-site audit.
Security is the last thing most site owners check.
$49 for a one-time report, or $199 for up to five sites. No fine print, no surprise charges.
