Find out what is wrong with your website before someone else does.
Enter your address and prove the site is yours. Sentinel reads it the way any visitor could, and gives you a short list in plain English: what to fix, and what to tell whoever built it. Then it checks again every week.
14 days free, no card. Then $29 a month for up to 3 websites.
yourbusiness.com
4 things to fix.
Start with: A file of passwords and keys can be read by anyone.
- A file of passwords and keys can be read by anyoneFix nowFound at /.env. It holds the database password.
- Your site's security certificate is about to expireFix soonIt expires in 9 days.
- Your site's software is behind the current releaseShould fixWordPress, two releases behind.
- Browsers are not told to always use encryptionWorth tidying
This is a sample. Sentinel only checks a website after its owner has proven it is theirs, so yours starts when you sign up.
How it works
Enter your address
Nothing to install, and no settings to choose.
Prove the site is yours
Upload one small file, add one tag, or add one DNS record. If someone else looks after your site, Sentinel emails them the steps.
Read the list
Each problem says what it is, why it matters, how serious it is, and the exact words to send your web person. The first check starts by itself.
Leave it running
Sentinel checks again every week. A problem stays on your list until a check no longer finds it, and you get an email if something serious appears.
What it checks
13 checks in 7 areas, able to report 44 different problems. Every one only reads what your site already shows to any visitor.
- EncryptionWhether visitors reach your site over a private, trusted connection.8 problems it can find
- Browser protectionsThe instructions your site gives a visitor's browser to keep them safe.9 problems it can find
- Exposed filesFiles that were never meant to be public but can be downloaded by anyone.9 problems it can find
- Out-of-date softwareSoftware your site says it runs that its maker no longer supports or has since updated.3 problems it can find
- Exposed doorsAdmin, setup and debugging pages that anyone on the internet can open.6 problems it can find
- Email spoofingWhether someone else can send email that appears to come from your domain.5 problems it can find
- Leaks in the pageKeys, internal addresses and error details visible in your pages to anyone who looks.4 problems it can find
What it will not do
- It will not touch a site you have not proven is yours. The proof is looked for again before every check, not only the first.
- It will not attack your site. It never submits a form, tries a password or sends anything designed to break something. It can only read.
- It will not give you a grade. A letter hides which one thing to fix first. You get a list, most serious at the top.
- It will not fix the problems. It tells you, and whoever looks after your site, exactly what to do.
What it does not look at
A clean result means nothing was found by these checks. It is not a promise that a site is secure, and every report says so. Sentinel does not check:
- Anything behind a login.
- Whether forms, searches or logins can be attacked. Sentinel never submits a form or sends attack data.
- Plugins, themes and other software whose version the site does not state.
- Pages that only appear after a browser runs the site's scripts.
- Other servers on your domain, such as mail servers or forgotten subdomains.
Tools built for security professionals check far more than this, and attack as well as read. How Sentinel compares.
$29 a month.Up to 3 websites.
One plan, with everything in it. No contract. Cancel from the billing page whenever you like.