Skip to content
isyoursitesafe

Pricing

One payment, no subscription.

Every price is on this page. Reports are one-time purchases; the only recurring item is Proof Maintenance, and you can cancel it anytime. Start free: 14 of 61 checks.

The guarantee, in three clauses

  1. a

    At least one actionable finding, or it's free.

    If the report gives you nothing you can act on, you get your money back.

  2. b

    Effort estimates you can hold us to.

    Every finding carries an effort estimate. If one marked at 1 hour or less takes more than 2 hours, you get a refund.

  3. c

    A refund revokes the certificate.

    Refunded work can't keep a Fixed & Proven certificate. Its public page changes to REVOKED, so nobody relies on proof you took back.

Reports

Free Exposure Check

FreeNo card

Where you stand, in plain English, with nothing to buy.

  • Score, finding titles and severity for 14 of 61 checks
  • Passive and single-request checks only
  • Report by email

Site Report

$149One payment

A dated report you can hand your insurer, your customer or your host.

  • Groups A to E and H of the 61 published checks, in a full human-readable report
  • Proof, a fix and an effort estimate for every finding
  • A machine-readable copy for your developer (JSON and SARIF)
  • 1 retest at 30 days

Complete

A year of upkeep included

$749One payment

For shops and sites that take payments or run AI chat.

  • Everything in the Site Report, plus groups F and G of the published checks
  • E-commerce and third-party script audit, exposed endpoints, AI-surface scan
  • 4 retests: at 30, 60 and 90 days, and at 12 months
  • 1 hour of fixing included (findings from your report, in our priority order)
  • Proof Maintenance included through month 12, then $29/mo, cancel anytime (value $279)

Proof Maintenance

A drift re-scan against your own last scan, a re-issued agent file, and the upkeep that keeps your certificate true. Cancel anytime.

Drift watch
$19
Proof maintenance
$10
Per month
$29/mo

Included on Complete through month 12, then $29/mo, cancel anytime. It is not a cleanup service and it does not replace a backup.

Annual · shown by default

$279/yr

One charge a year. Cancel anytime.

Monthly

$29/mo

Shown as drift watch $19 + proof maintenance $10.

The fix menu

Every price comes from the effort estimate in your report, never from a guess about you. Each fix closes with a re-scan that shows it worked.

Fix menu: service, effort cap, price and checkout
FixEffort capPrice
SPF and DMARC
≤2h$149
Security headers and CSP
≤3h$199
TLS, redirects and cookies
≤3h$249
Subdomain takeover removal
≤3h$199
CMS and plugin remediation
≤6h$399
Leaked secret rotation
≤8h$499
AI-surface hardening
≤8h$749

Work beyond a band: $149/h, always with a written quote first.

Beyond these reports

Pricing questions

How much does a website security scan cost?

The free Exposure Check costs nothing. It runs 14 of 61 checks and emails you a score, finding titles and severity.

The full Site Report is $149, one payment: every finding with proof, a fix and an effort estimate, plus one retest at 30 days. Complete is $749, one payment, and adds the e-commerce, endpoint and AI-surface checks, four retests, an hour of fixing and a year of Proof Maintenance.

If you want us to do the fixes, each one is priced by effort, from $149 to $749. Proof Maintenance after the first year is $29/mo or $279/yr. There is no subscription unless you choose one.

Is this a subscription?

No. Reports are one-time payments. Proof Maintenance is the only recurring item; it is optional and you can cancel it anytime. On Complete, the first year is included and the price after month 12 is printed before you buy.

Can I get a refund?

Yes, on the terms of the guarantee. If the report has no actionable finding, it's free. If a fix we estimated at 1 hour or less takes more than 2 hours, you get a refund.

A refund revokes any certificate tied to that work, and its public page says so.

All questions