Your 24/7 security fortress.Free forever for 1 domain.
We watch your site every week. Fix the safe stuff automatically. Tell you when something needs your eyes. You sleep.
Trusted by businesses today. Set up in 30 seconds — no card, no contract, no consultant.
- 10M+ scans run
- 613+ UK sites watched
- Hourly threat-intel ingest (KEV + GHSA + EPSS)
- Audit trail + one-click undo on every fix
- Built for Cyber Essentials & UK GDPR
Works with Cloudflare · Vercel · Netlify · Resend · Mailgun · SendGrid
Three steps. Then we vanish into the background.
- 1
Set up
Tell us your domain. 30 seconds. No card. Free forever for one domain.
- 2
We guard
Weekly deep checks against 99+ rules. New threats from KEV, GHSA and EPSS as they break — not on a quarterly review cycle.
- 3
We fix or tell you
Safe fixes apply silently (HSTS, security headers, DKIM alignment). Risky fixes land in your inbox for one-click approval. Everything reversible.
Everything most SMBs hire a consultancy for.
Same engine the agencies use. Plain-English narrative. No PDF you have to read on a Sunday.
Continuous monitoring
Your score over time with a trajectory chart. Drift alerts the moment a third-party script appears or a header gets nuked.
Auto-remediation that follows your stack
Cloudflare, AWS Route 53, cPanel, Vercel, Netlify, Resend, Mailgun, SendGrid live today. GoDaddy, Namecheap, Workspace, Microsoft 365 next. See the full roadmap →
Audit trail + undo
Every applied fix is logged with the exact vendor API payload. One-click revert if anything looks off.
UK-sector peer benchmarking
Median score and prevalence of issues across legal, ecommerce, healthcare, SaaS, financial services. Know where you stand.
AI narrative — plain English
No jargon walls. The report tells you what's actually exposed, who'd care, and what to do this week vs this quarter.
Public status badge
Embeddable score badge for your trust page. Pulls live — a regression updates the badge automatically.
Slack & Discord alerts
New critical finding? Score dropped 10+ points? Goes straight to the channel where your team already lives.
MCP-compatible
Native tools for Claude, Charlotte AI, and any custom agent. Your AI can query findings and trigger fixes the same way you would.
Engineered for compliance
Cyber Essentials, UK GDPR, ISO 27001 evidence packaged at scan time. Show your auditor the receipts in two clicks.
What we've learned from 613 UK sites.
Aggregated and anonymised. The full public report breaks every figure down by sector — legal, ecommerce, healthcare, financial services, SaaS, media, manufacturing.
Pulled from 613 anonymous Mode 1 scans across UK SMB sectors. Updated hourly.
Free for one site. Built for scale when you outgrow it.
The free tier is not a trial. It is, and always will be, a real working fortress for one domain.
- 1 domain
- Weekly Mode 1 scans
- Auto-apply for safe fixes
- Slack alerts
- Public benchmark access
- 10 domains
- Daily Mode 1 scans
- Every live vendor remediator
- Custom alert rules
- PDF reports + audit packets
- Unlimited client domains
- White-label score badge
- MSP dashboard + tenant isolation
- Mode 2 active VA bundle
- Priority support, SLA
Free is free. Set-up is 30 seconds. Sleep is yours.
Submit your domain, get a baseline scan in ~30 seconds, then we quietly take over the watch.
Built in the UK. By submitting you agree to our privacy notice.