A ready-made prompt for your AI
Paste it into ChatGPT, Claude or Gemini. Or hand it to the AI editor of whoever built the site.
Is your sitesecure?
In about a minute, specialist agents show what your site is exposing and how to fix it.In about a minute, a team of specialist agents checks your site and shows what's exposed, what it means and how to fix it, in plain words.
aroeirastore.com
Free shipping over $99
Summer collection
Light, fresh and handmade
Linen and cotton pieces for sunny days.
Shop now
Best sellers
See all
Tide dress
$59
Straw bag
$39
Sun sandals
$45
Breeze hat
$29
10% off your first order
New arrivals and coupons in your inbox.
Your bookkeeping on autopilot
Invoices, taxes and reports in one place.
Revenue
$18.4k
Taxes this month
$1.3k
Invoices sent
312
4,000+ businesses close their books with us
Wheat BakeryLume OpticsPet PlusStudio K
Invoices
Sent and filed without a second thought.
Taxes on time
A reminder before every due date.
Reports
Your month at a glance, in one click.
“I close the month in one afternoon.” Marina, shop owner
Free for 14 days
Get started
Workouts that fit your routine
In person, online or outdoors.
Online
$49/mo
In person
$129/mo
Running
$79/mo
Free trial session
Your namePhoneBook my sessionClient results
−18 lb
in four months of training
CCarla
13.1 mi
her first half marathon
JJulia
No pain
in her back after a year
RRenata
Your smile in good hands
Full check-up and treatment plan on the same day.
Dr. Ana LimaOrthodontics
Treatments
Orthodontics
Implants
Whitening
Kids' dentistry
Book your check-up
Full nameBookChecking
Grade–
Break-in riskBreak-in
Downtime riskDowntime
Data leak riskData leak
We put together a team of 13 specialist agents so you don't have to worry about what your website might be exposing. Each one watches over one kind of risk, following dozens of industry rules and standards. Together they reach a single diagnosis and explain what to fix first, in plain words, without touching a thing.
How it works
- 1
Paste the address
Store, blog or company site. No password, server access or installation needed.
Is your site secure?
aroeiracoffee.comCheck my siteI'm authorized to check this site. - 2
The agents get to work
A team of specialist agents checks your site at the same time, each trained on one kind of risk and guided by recognized security standards. Nothing is broken into or changed.
0 of 13 done
aroeiracoffee.com- Secure connection
- Browser protections
- Sessions and cookies
- Exposed files
- Private areas
- Components
- Outside integrations
- Forms
- Information leaks
- Domain email
- Domain
- Reputation
- Privacy
- 3
You get one clear diagnosis
The agents cross-check what they found and reach a consensus: what's urgent, what can wait and how to fix it, in plain words.
Agent consensus
C72/100Your padlock is fine, but your domain's email can be faked.
What to do first
- NowSomeone can send email pretending to be you
- This weekA lock against injected scripts is missing
- When you canThere's no channel to tell you about a flaw
13 specialists, dozens of checks
Each agent is trained on one kind of risk and follows rules and standards recognized by the security industry. Together, they cover what exposes sites like yours the most.
Secure connection
Makes sure the connection to your site is truly protected and nothing expires without warning.
Browser protections
Reviews the defenses your site should turn on in every visitor's browser.
Sessions and cookies
Checks that the sessions of people who log in to your site are protected.
Exposed files
Looks for files and data that should never be public.
Private areas
Reviews what your site reveals about areas that should stay hidden.
Components
Spots outdated software pieces or ones with known flaws.
Outside integrations
Reviews what your site loads from elsewhere and how much it trusts it.
Forms
Makes sure what visitors type reaches its destination protected.
Information leaks
Hunts for exposed technical details that make an attacker's life easier.
Domain email
Checks whether someone can impersonate your business by email.
Domain
Reviews the settings that keep your domain under your control.
Reputation
Checks whether your site shows up on lists of dangerous sites.
Privacy
Checks whether your site respects visitors' privacy, as the GDPR and Brazil's LGPD require.
Put the team to work on your site.
Check my site
You leave with everything ready to fix
Every problem comes explained, with the next step ready: for you, for your AI or for whoever looks after your site.
Talk to the agents
Ask anything about each problem. The agent who found it explains it in plain words.
Instructions for whoever runs your site
A ready message with your grade and what to fix first. The link leads to the technical evidence and the fix for your site's technology.
A report made for your site
Every problem in priority order, with the fix for your site's technology. As a PDF and a link to pass on.
A heads-up when something changes
If you want, the agents check your site every day and email you when something new shows up.
A second check after you fix
Fixed it? The agents check again and show what's solved and what's left.
Checked by the agents
Questions
The essentials about how the check works, what happens to your data and what comes next. Didn't find your question? Talk to us.
How does Vulny check my site?
A team of specialist agents checks your site in parallel, each focused on one kind of risk and guided by recognized security rules and standards. At the end, the results are cross-checked into a single diagnosis, with priorities and plain-language explanations.
Is this a penetration test?
No. A penetration test tries to break into the site, with authorization and human specialists involved. Vulny reviews what any visitor can see, with light and safe checks. It's a fast, affordable first step and doesn't replace a penetration test when you need one.
Do you break into or change my site?
No. We don't try passwords, send attacks or change anything. The check only does what a regular visitor could do, with a low request limit.
Can I check someone else's site?
Only with authorization, and every check asks you to confirm it. The exact location of sensitive findings, like an exposed file, only shows after the owner confirms the domain is theirs.
How long does it take?
About a minute. You can watch the agents work live, or leave the page: the result stays at the same address.
What if my site is fine?
We'll say so plainly and show everything that's in order.
What do you store?
The address we checked, the result and, if you buy, your email. Your IP is only stored as a hash, and technical evidence is deleted after 30 days. We never read or store the contents of an exposed sensitive file.
Find out now if your website is secure.
The check is free, takes about a minute and changes nothing on your site.