Risk priority
Critical 0 · High 0
See what needs action first, instantly
Free · Headers & HTML · Signup optional
Check your website security. Track risks over time.
Check public security headers and HTML for free. Use scheduled scans and evidence-based reports to track findings and plan fixes.
Breaches and outages often start with small misconfigurations. Surface the obvious risks first.
What’s free vs. what you pay for
Quick Scan gives a fast snapshot without signup. Ongoing audits need saved results, exports, and automation.
Right now (free)
- Header and HTML snapshot with severity counts
- No login · results expire after 24 hours; expired data is periodically deleted
- No evidence export, PDF, team sharing, or schedules
Signup & paid plans
- Persisted results, full evidence, remediation guidance, AI-assisted report text
- Projects & domains with monthly scan quotas
- Pro: weekly/monthly schedules + PDF email + standards-mapped reports (KISA, OWASP, etc.)
Limits match the pricing cards; large or on-prem deployments go through sales.
Everything you need, one screen
Severity and priority come from scanning and rules. AI turns those results into clearer summaries and report wording.
Static + pattern + dynamic, one pipeline
Web page static analysis (60 rules) → known vulnerability and misconfiguration pattern checks (wider by scan type) → dynamic checks when your plan allows-with OWASP/CWE-aligned summaries.
Auto mapping to standards
Findings link to applicable KISA, NIS, MOIS, OWASP and CWE references, with CVE information where identified. Confirm mapping accuracy and applicability before using reports as audit evidence.
Engine classifies; AI frames the narrative
Engines and rules determine findings and severity. AI assists with evidence-based summaries and remediation wording. AI availability and supported languages depend on your plan.
Pick the shape that fits you
One-shot today, or weekly forever.
Free
Try it now (Quick Scan)
No signup, quick check. Use the box above to start.
Scan now
Subscription
Recurring Reports (Pro)
Weekly or monthly automated scans with PDF reports delivered to your inbox.
Start subscription
One-time
Deep Report (One-shot · ₩29,000)
A single deep scan on one domain - no subscription. Pro-tier depth + comprehensive PDF.
Order report
See the actual report format
From summaries to evidence and remediation, explore the PDF format generated by the service.
Actual output format · Fictional data
A four-page sample made with the service’s report generator. The project, domain and findings are illustrative, with no customer information or real-site assessment results.
- Risk at a glance
- Explore key metrics and severity charts, with unassessed items clearly identified.
- Priority actions and evidence
- Read the impact, remediation guidance and collected evidence for each finding.
- Scope and limitations
- Understand what automated findings mean and where further validation is needed.
Free Quick Scan does not include PDF reports. Actual coverage depends on the scan type and plan.
Four steps. That's it.
From the dashboard, your team can quickly see priority risks, recent scan trends, and remediation progress in one place.
- 1
Enter URL
Provide the domain or URL you want to assess.
- 2
Auto scan
Static and pattern checks identify findings and severity. Dynamic checks run when supported by your plan and configuration.
- 3
Standards mapping
Map and classify findings to KISA, NIS, MOIS, OWASP automatically.
- 4
Report delivery
AI tailors executive, developer, and ops views-evidence and fix guidance in one place.
Dashboard advantages at a glance
Security, engineering, and leadership stay aligned on one shared view.
Illustrative values below; these are not actual customer data.
Recent scan trend
+0%
Compare improvement and regression vs last week
Remediation status
0 resolved · 0 in progress
Share progress clearly across teams
Standards your reports are mapped to
These labels identify the security standards used to classify findings. They do not indicate partnerships or certification. Reports require expert review before use as audit evidence.
KISANISMOISOWASPCWECVE
Operations-focused pricing
Start with a free check, order a single report, or choose recurring scans for your team.
Free
Try header and HTML checks on one domain
$0
- 1 domain / 1 project
- 3 Quick header and HTML checks / month
- Severity & type only (no detail / report / export)
One-shot
Quickly diagnose your security posture and verify with a report
₩29,000
- One domain · one-time deep assessment
- 60 static analysis rules + signature-based pattern scan (OWASP/CWE auto-mapping)
- Comprehensive PDF (KISA, NIS, MOIS, OWASP auto-mapping)
- Dynamic deep scan, expert review, and multi-domain are separate consulting
- One-time analysis for an initial assessment
Pro
Scheduled scans and reports for recurring security operations
₩89,000/mo
- Up to 3 projects / up to 3 domains per project
- 30 safe scans / month (static analysis rules + pattern scan)
- Scheduled weekly/monthly scans + PDF report email delivery
- Auto mapping to KISA·NIS·MOIS·OWASP + AI remediation guidance
- No dynamic scans · no rescan feature
Enterprise
Login session checks and recurring security operations
₩290,000/mo
- Up to 20 projects / up to 10 domains per project
- 200 scans / month (static · pattern + dynamic checks)
- Flexible schedules (daily/weekly/monthly) + vulnerability rescans
- Automated weekly/monthly reports + priority support
- Configured session checks and limited GET input checks; excludes full attack reproduction
- Security operation automation through post-fix revalidation
On-premise and large custom plans are handled separately
For needs beyond standard Pro/Enterprise (large domain volume, annual contracts, custom operating policies), contact us for a tailored offer.
Traditional security checks
- - Assessment arranged when needed
- - Follow-up timing managed separately
- - Scope and reporting agreed per engagement
Our service
- - Scheduled scans by plan
- - Scan history and change tracking
- - AI-guided remediation
Frequently asked questions
It checks security signals in a public response.
It does not detect every vulnerability or guarantee that a site is secure.
Saving results, evidence, PDFs, team sharing, and recurring scans require signup and a plan.
When you manage multiple domains, need checks every release, or must produce audit-ready reports - upgrade to Pro or talk to sales.
No. Only scan domains you own or have permission to test.
Public Quick Scan checks response headers and HTML. After signup, scan coverage depends on your plan and configuration.
Free Quick Scan results can be viewed for 24 hours; expired data is cleaned up periodically.
After signup, you can bring one target and its response summary into a new project once. This does not import a full assessment report.
Pro subscribers can choose weekly or monthly, with the auto-generated PDF delivered to a registered email.
PDF and an email summary by default, plus JSON download inside the app.
A GET request to the target URL (with additional requests for redirects), followed by web page static analysis of response headers and HTML (up to 60 rules) - security headers such as HTTPS, HSTS, CSP, X-Frame-Options, Referrer-Policy; Set-Cookie flags (Secure / HttpOnly / SameSite); mixed content, plaintext forms, server version disclosure, and more. HTTP requests are made to the target; completion time depends on the target and network. After signup, full scans add signature-based pattern checks (wider by scan type), dynamic checks when your plan allows, and AI reports.