FREE AgentCheck Mini-Check

What does your chatbot reveal before a customer ever says hello?

Your website already tells the world a lot: which chatbot you run, what your pages expose, and whether the basics are locked down. The free AgentCheck mini-check reads those public signals the way an attacker would — and sends you the findings, in plain English, within a minute or two.

✓ Free, no calls ✓ Nothing to install ✓ Findings on screen and by email

Run your free mini-check

Tell us where your business lives online. We scan only what is already public — the same view anyone on the internet has.

One free check per site per day. We email the findings to you and keep a copy for our records — see our Privacy Policy. No spam, ever.

What this free check covers — and what it does not. It looks at public, outside-in signals only: the chat widget and vendor your pages load, anything sensitive visible in public page source, HTTPS basics, and whether a privacy policy is linked. It does not talk to your bot. The full AgentCheck audit does the talking — 60 adversarial prompts in the Mini-Audit, 200+ in the Full Audit — and delivers a written report with fixes.

What the free scan looks at

Five public checks. Every finding in your report comes from something the scan actually observed on your pages — if it cannot see something, the report says so.

Chatbot presence & vendor

Which chat widget your pages load — Intercom, Tidio, Zendesk, a custom build — and the fact that it is a public conversation surface anyone can probe.

Check 1

Keys & secrets in public source

Whether live API keys, private keys, or labeled tokens are sitting in page source where any visitor can copy them.

Check 2

Public bot configuration

Configuration files and widget identifiers your page itself hands to every visitor's browser.

Check 3

HTTPS & certificate basics

Whether the site loads securely, redirects the plain address to HTTPS, and whether the certificate is healthy and not about to expire.

Check 4

Privacy policy link

Whether a privacy policy is one click away — the document customers and regulators look for when a chatbot collects personal details.

Check 5

An outside scan is the first five minutes of an attacker's homework. The expensive failures — a bot talked into fake discounts, leaked customer data, a system prompt handed over — only show up when someone actually talks to the bot. That is what the paid audit is for.

See the full audit options