Run your free mini-check
Tell us where your business lives online. We scan only what is already public — the same view anyone on the internet has.
What the free scan looks at
Five public checks. Every finding in your report comes from something the scan actually observed on your pages — if it cannot see something, the report says so.
Chatbot presence & vendor
Which chat widget your pages load — Intercom, Tidio, Zendesk, a custom build — and the fact that it is a public conversation surface anyone can probe.
Keys & secrets in public source
Whether live API keys, private keys, or labeled tokens are sitting in page source where any visitor can copy them.
Public bot configuration
Configuration files and widget identifiers your page itself hands to every visitor's browser.
HTTPS & certificate basics
Whether the site loads securely, redirects the plain address to HTTPS, and whether the certificate is healthy and not about to expire.
Privacy policy link
Whether a privacy policy is one click away — the document customers and regulators look for when a chatbot collects personal details.
An outside scan is the first five minutes of an attacker's homework. The expensive failures — a bot talked into fake discounts, leaked customer data, a system prompt handed over — only show up when someone actually talks to the bot. That is what the paid audit is for.