AppInspected

Badge + daily monitoring

We look at your site from the outside every day, the way any visitor's browser can, and email you when something changes. You get a live badge and a public status page that stay honest: they never say "secure", and they never show what we found.

Checked every day

  • HTTPS and the http:// to https:// redirect.
  • Security headers: an alert if one disappears after a deploy.
  • Secret and AI API keys in your JavaScript: every new script file is scanned with the same detectors as the report.
  • Exposed files: .env, .git and your main bundle's source map.
  • New third-party scripts on your home page.
  • Email records: SPF and DMARC.
  • Certificate expiry from the public certificate logs, with alerts at 21 and 7 days.

The badge

  • AppInspected: Passed No high-risk issues at the last check.
  • AppInspected: Monitored · fixing A high-risk issue appeared; you have 7 days to fix it.
  • AppInspected: Monitored · last passed Issues stayed open longer than 7 days.
  • AppInspected: Not monitored The subscription ended.

Findings are only ever shown to you, never on the badge or the status page. $9 a month, cancel anytime. Includes one full website security report every 30 days. See an example dashboard · example status page.

  1. Start
  2. Prove ownership
  3. Subscribe
  4. Dashboard