VigilScan checks your website the way an attacker would and tells you, in plain English, what needs fixing — and how. Built for small businesses, not security experts.
You don't need to understand security to use VigilScan. Type your website address and we'll do the rest.
We look at your website from the outside, the same way an attacker would — and show you what's exposed before they find it.
No red walls of warnings. You get a simple A to F grade and, for each issue, what it means for your business and exactly how to sort it.
Verify you own your domain and we'll re-check it every week, warn you the moment something changes, and tell you when a new threat affects your site.
We run 47 individual checks. These are the ones that matter most.
A newly-discovered weakness that lets hackers take over websites running out-of-date PHP. We check if yours is patched.
Hidden files left on your site can expose your database password to anyone who guesses the address.
An old address pointing at a service you no longer use can be claimed by an attacker and used against you.
Visitors see a scary "not secure" warning and leave. Trust gone in a second.
Old versions of WordPress, plugins and servers with publicly-known weaknesses.
Without the right settings, anyone can send emails that look like they came from your business.
We'd rather tell you straight than overpromise. An outside check finds what's visible from the internet — and nothing else.
We never say your site has "no problems". We tell you what we checked, what we found, and what we couldn't test.
Start with a free check. Verify your domain for a deeper check, also free. Pay only if you want us to keep watch.
A full check of any website. No account needed.
Prove it's your site and we look deeper.
We check every week and tell you the moment something's wrong.
Free, safe, and written for people who run a business — not a security team.
Check my website