Skip to main content
Basic External Website Security Scan

What can the Internet see about your website?

Establish a focused, reviewed baseline for one authorized public website: its visible response, DNS and technology signals, HTTPS, certificate, and security headers.

Start this assessment for $149One-time baseline assessment

What the baseline covers

  • Website and DNS exposure review
  • TLS, certificate, and security-header checks
  • Externally observable technology findings
  • Reviewed report with prioritized next steps

Authorized baseline

One registered domain and one primary public website. This is an external, non-destructive assessment, not an authenticated application test.

Reviewed, private results

You receive a prioritized report through your verified client account after the assessment is completed and reviewed.

After your baseline

Continuing monitoring of what we assessed · $49/month

After the completed baseline is published, Basic website monitoring can compare the same site's root response, HTTPS availability, and certificate status over time.

Monitoring follows only the website and observations established in this baseline. It does not repeat the full scan, test internal systems, or expand to other domains.

View client options

Questions about your report—or another technology issue?

We can explain the findings, help prioritize your next steps, or discuss other technology challenges affecting your business. You do not need to know where to start.

Ask SunTzu for help

Asking a question does not commit you to paid work. Any proposed scope and cost will be explained first.

Keep track of changes after your assessment.

An assessment reflects the evidence collected at that time. We recommend ongoing monitoring and scheduled reassessments to identify meaningful changes and verify agreed fixes.

Discuss ongoing monitoring

We will help define the assets, checks, schedule and notification process that fit your needs.