Basic Website Scan
Fast baseline on headers, TLS, cookie security, and top-level exposure signals.
Open scannerFree Website Security Scanner
Check your site's security posture in one scan.
GuardScanner runs practical security assessments without enterprise overhead. Start with a website baseline, verify ownership for deeper analysis, then expand into DNS, TLS, redirects, CSP, exposure mapping, and server hardening.
Ten focused scanners with scored, severity-tagged findings
Ownership verification gates the deeper web checks
Server-agent workflow that never touches your SSH credentials
86
example.com — Grade B 42 checks run · 3 findings flagged
HIGHPort 3306 (MySQL) publicly reachable
MEDCSP allows 'unsafe-inline' in script-src
LOWHSTS max-age below one year
tls ✓ dns ✓ redirects ✓ crawl-surface ✓
Results in seconds
No account required
Ten focused scan modes
Severity-scored findings
Every layer of your surface, one scanner at a time
Each scan mode targets a specific layer, so you can run focused checks and skip the noise.
Advanced Verified Scan
Ownership-gated deep scan with DNS TXT verification and sensitive path probing.
Open scannerTLS Inspector
Certificate validity, expiry window, trust diagnostics, and HSTS enforcement checks.
Open scannerDNS Audit
SPF/DMARC posture, NS/MX visibility, CAA checks, and domain configuration hygiene.
Open scannerPort Exposure Snapshot
Common port exposure scan with risk tagging for sensitive internet-facing services.
Open scannerSubdomain Inventory
Quick candidate-based subdomain discovery and exposure review for risky hostnames.
Open scannerRedirect Chain Analyzer
Maps redirect hops, detects loops, flags HTTP hops, and highlights final destination risk.
Open scannerCSP Evaluator
Analyzes Content-Security-Policy strength and reports unsafe directives.
Open scannerCrawl Surface Audit
Reviews robots.txt and sitemap exposure patterns for accidental information leakage.
Open scannerServer Agent Scan
Download shell agent, run locally, and analyze report output without sharing SSH credentials.
Open scannerHow teams use GuardScanner
Run quick baseline checks first, then branch into specialized scanners based on risk and ownership.
Baseline + verify
Run Basic immediately, then use Advanced with DNS TXT verification for deeper confidence.
Protocol + policy
Use TLS, Redirect Chain, and CSP scanners to close common web-layer misconfigurations.
Surface + infrastructure
Use DNS, Subdomains, Ports, Crawl Surface, and Server Agent to review attack surface continuously.
GuardScanner FAQ
Is this a vulnerability scanner replacement?
No. It is a fast posture and exposure scanner suite designed for practical triage and hardening workflows.
How does Advanced Scan prevent abuse?
It requires a DNS TXT challenge to prove domain control before running deeper checks.
How does server scanning work safely?
You run a shell agent locally on the host and paste report output. No in-app SSH credential collection.