Know your security score. Fix what matters.
Warden runs 30+ automated checks on your website and delivers a plain-English security report with an A–F grade and step-by-step fixes — fully automated, no consultant to hire. No security expertise required.
From $14.99/month · Cancel any time
How it works
From domain to a graded report — no weeks-long wait
Add and verify your domain
Confirm you own the domain with a quick DNS record or file upload. Takes under 5 minutes.
Run a scan
Warden performs 30+ automated checks. Standard checks are read-only, so your site stays live throughout; the optional Deep Scan adds active testing you authorize separately. We'll email you when your report is ready.
Get your graded report
View your A–F grade and health score, review findings with plain-English fixes, download or share your PDF report.
Fix and re-scan
Each finding includes step-by-step remediation guidance. Fix issues and re-scan to watch your score improve.
What Warden checks
30+ security checks — passive and active
Automated DAST (dynamic application security testing) for your live site, with plain-English findings and an A–F grade.
Protocol version, cipher strength, certificate validity and chain — plus expiry alerts
CSP, HSTS, X-Frame-Options, Permissions-Policy and more
Secure, HttpOnly, SameSite attributes on all cookies
Sensitive files, backup files, and directory listings
Unnecessary HTTP methods that increase attack surface
HTTP resources loaded on HTTPS pages
Detects public AI chatbots and LLM endpoints on your site and — with your consent — tests them for prompt-injection weaknesses.
Deep Scan actively probes for cross-site scripting (XSS), SQL injection, path traversal and open redirects — built on OWASP ZAP, and only ever against a domain you have verified and authorized.
Add a test account and Deep Scan signs in first, so it covers the parts of your application behind a login — including whether one account can reach another account's records.
TLS cipher/protocol depth, subdomain discovery & takeover, known-CVE and end-of-life intelligence, and port/service exposure.
Every finding is cross-referenced to the ISO 27001, PCI DSS, SOC 2 and Cyber Essentials controls it affects — your report doubles as audit evidence.
On-demand, page-by-page SEO audit — titles, meta descriptions, headings and structured data — scored 0–100 with plain-English fixes.
Crawls your public pages into a map of forms, logins, links and third-party scripts — your real attack surface at a glance.
The Warden trust badge
Show clients your site is secure
After a successful scan, embed a Warden trust badge on your site. Updated automatically with each scan — always reflects your current grade.
White-label reports
Reports your clients think you wrote
On Agency and Business plans every report goes out under your brand — your logo, your colours, your contact details. Built for agencies and MSPs reselling security as a recurring service line.
Logo, agency name and contact details on the PDF, the on-screen report and the shared link.
Set an accent and a cover colour so the report matches the rest of your deliverables.
Spreadsheet and list exports carry the same header your clients already recognise.
An automated test checks that no Warden or Veritai text survives a branded report render — it is not just a setting.
Pricing
Straightforward plans. No surprises.
From $14.99/month for a single domain.
Simple monthly pricing — cancel any time.
"The report it produces is exactly what our enterprise client's procurement team needed — clear, graded, independent, and delivered without the weeks-long wait."
What's your security grade?
Run a scan and find out — no consultant, no weeks-long wait.
From $14.99/mo · Cancel any time