How secure is your website?
Find out before someone else does.
Check your Site examines your website from the outside, the way an attacker sees it. You get plain-language answers: what is fine, what is missing and what to do next. No IT department, no installation.
How it works- No installation
- Results in minutes
- Scan data on servers in Germany
- Non-destructive, no changes to your systems
You carry the responsibility. But who actually checks?
Your website is up. Whether it is secure, nobody really knows. The agency built it, the host runs it, and nobody in-house looks after security.
A key customer asks.
You are expected to document in a questionnaire how you protect your IT, and you do not know what to answer.
The insurer wants evidence.
With cyber insurance, cover can lapse if the measures you promised were not in place when the damage occurred.
Software ages quietly.
New vulnerabilities are published every day. Whether one of them affects your website, nobody notices until something happens.
As a managing director you are liable for appropriate security. Until now you could hardly check it.
Three steps from "no idea" to "under control".
Check for free.
Enter your website address and create a free account, no credit card. Within minutes you see the most important findings, with nothing to install.
Check thoroughly and understand.
With the Verified Audit we examine your website in depth once you have shown that it belongs to you. You get a security score from 0 to 100, every weakness in plain language and concrete steps your provider can apply directly.
Keep it in view.
We keep checking automatically and notify you when something gets worse or a new vulnerability affects your software. You can share the current state as evidence at any time.
No jargon. Clear answers.
| You want to know | You get |
|---|---|
| How is my website doing? | A security score from 0 to 100 with a clear rating, from "Well hardened" to "Significant gaps". |
| What really matters? | A prioritised list: first the items that bring the most with the least effort. |
| What does my provider have to do? | Concrete steps for your platform, for example WordPress, Shopify, nginx or Cloudflare, with sources. |
| Is my software outdated? | A match against the official vulnerability databases, refreshed daily, with a note when a gap is already being exploited. |
| Has something got worse? | Automatic checks weekly or daily and an e-mail when something changes. |
| How do I show this to others? | A PDF report and a shareable evidence link for customers or insurers. |
| Is my certificate about to expire? | A notice as soon as your certificate expires in less than 30 days. |
An AI gives you an opinion. We give you evidence.
AI assistants can explain a lot. For the security of your website they lack four things:
| AI assistant / Check your Site | AI assistant | Check your Site |
|---|---|---|
| Same result for the same website | Every answer comes out differently | Fixed check rules, traceable and repeatable |
| Ongoing monitoring | Only when you ask | Automatic, with alerts on changes |
| Current vulnerability data | Knowledge with a delay | Daily match against official databases |
| Evidence for third parties | A chat transcript | Report and evidence with date and checksum |
The check itself works without AI. Every finding follows a fixed, documented rule.
When someone asks, you already have the answer.
For your key customers
Under NIS2 many large companies have to assess the IT security of their suppliers and pass questions on to you. With one click you create an evidence link: check date, security score, open items by severity and history. You decide how long the link is valid and can withdraw it at any time.
For your cyber insurer
Your check history is stored completely and tamper-evidently. When it matters, you show how your website looked from the outside on a given day.
To be honest
An external check only documents what is visible from the outside. Backups, training or internal access rights have to be shown another way. Every evidence document says so. The evidence is not a certificate and not a conformity statement.
We check carefully, without causing harm.
Non-destructive
We only check with safe HTTP methods. No sign-in, no credentials, no exploitation of gaps, no changes to your systems.
Only with permission
The thorough check starts only after you have shown that the domain is yours, via DNS record, meta tag or file.
Honest about limits
If your website blocks the check, we say so instead of showing a flattering result.
Data protection
Scan data on servers in Germany, e-mail via an EU provider. Your data is not sold and only shared with the service providers named in the privacy policy.
Recognised data sources
Vulnerability data from the NVD, OSV.dev, CISA KEV and FIRST EPSS.
Behind Check your Site:adunique GmbH, Cologne. Digital agency since 2009.
Frequently asked questions
Do I need IT knowledge?
No. Every finding is explained in plain language, with concrete steps you can pass on to your provider.
Can the check harm my website?
No. We only check with safe HTTP methods and change nothing. The requests roughly match a visit to a few pages.
May I check any website?
The free quick check, yes. The thorough check only for websites whose ownership you have shown.
Does this replace a penetration test?
No. A pentest goes deeper, also with credentials, and costs many times more. Check your Site checks continuously from the outside and works as a baseline and between two pentests.
Does this help with NIS2?
Yes, as one building block. An external check does not cover every requirement, but it provides evidence for the areas visible from the outside and shows clearly what you have to document another way.
What happens to my data?
Scan data is stored on servers in Germany and is not sold. You can delete your account at any time and download your evidence documents beforehand.
My website runs on Wix, Shopify or Webflow. Is this useful?
Yes. We recognise the platform and show what you can change yourself and what the provider controls. Items the provider controls are rated as notes and do not lower your score.
How secure is your website, really?
The first check takes a few minutes and costs nothing.
Prefer to talk? Book a short call to go through it.