What the quick check looks at, and what it can't see
Your assistant ran AttackerView's quick check. It makes one request to your homepage and reads your public DNS and TLS settings. It takes a few seconds and changes nothing on your site.
What it looks at
- Security headers, including the rules that limit what scripts can run on your pages
- Whether another site can show your homepage inside its own page
- How your homepage is cached and how it says what kind of content it sends
- Whether visitors on plain HTTP are sent to HTTPS
- Your HTTPS certificate and encryption settings
- Your DNS records, including DNSSEC
- Your email protection against spoofing: SPF, DKIM and DMARC
What it can't see
- Pages behind the login
- Every page other than the homepage
- Whether one account can reach another account's data
- Injection and other attacks
- Mistakes in how the app's own features work
Two ways to find out
Scan the whole site
Crawls every page, checks it against known vulnerabilities and shows how findings connect. Then it keeps checking every day.
Scan your domain freeHave AI agents try to break in
A team of AI agents tests the app the way an attacker would, signed in with a test account if you give them one. Every finding comes with the requests behind it.
Start an AI pentestWhat it costs
The scan is free for 14 days, no card. One pentest is €30. Or €29 a month, which includes a free pentest every month and a scan every day. A security firm charges thousands for a single test.