Website Security Inspection · Compliance · Performance · Email Authentication
Security scanners give you data. WebInspect gives you answers.
Scan for SSL/TLS, DNS, HTTP headers, and email authentication issues, then get clear, prioritized recommendations aligned with PCI DSS and the OWASP Top 10.
Plans
Start with a free inspection, upgrade to any tier from your results.
Know where your site stands in 60 seconds. An instant security snapshot of your domain (no signup required).
Hand your developer a prioritized fix list, not a raw scan. Expert explanations and practical guidance for developers and technical teams.
Includes everything in the Basic inspection. Available from your results page.
The exact lines to paste, matched to your provider and your stack. You don't need to work out what to change, just where to paste it.
Includes everything in the Technical Report. Available from your results page.
A security consultant reads your results and tells you what actually matters. Manual validation, adjusted priorities and a tailored action plan, signed by the consultant who wrote it.
| Basic Free | Technical €15 | Guided €35 | Expert Review €100 | |
|---|---|---|---|---|
| Technical findings | ✓ | ✓ | ✓ | ✓ |
| Security & Compliance Readiness | ✓ | ✓ | ✓ | ✓ |
| Risk explanations | — | ✓ | ✓ | ✓ |
| PCI DSS & OWASP relevance | — | ✓ | ✓ | ✓ |
| Step-by-step fix instructions | — | — | ✓ | ✓ |
| Copy-paste config examples | — | — | ✓ | ✓ |
| Personalized expert review | — | — | — | ✓ |
| Human consultant | — | — | — | ✓ |
You can upgrade to a higher plan at any time by paying only the difference.
Real report excerpt
Inspected domain: webinspect.pro
No DMARC record found
Without DMARC, even with SPF and DKIM in place, there is no policy telling receiving servers what to do with failed messages. Attackers can freely spoof your…
📋 RFC 7489
No Cache-Control header on the main page response
Without explicit cache directives, browsers and intermediary proxies make their own decisions, often resulting in unnecessary repeat requests to the server.
No DKIM record found
DKIM cryptographically signs each outgoing email. Without it, receiving servers cannot verify the message was not tampered with in transit, and your emails a…
📋 RFC 6376
Inspected domain: webinspect.pro
Website Performance
No Cache-Control header was detected. This header tells browsers how long to keep a local copy of your pages, reducing repeat server requests.
Apache
Header always set Cache-Control "public, max-age=3600"
Get step-by-step guidance for every finding.
Ready-to-use config examples for Apache, NGINX and IIS — matched to your server
Your report will reflect your own domain — technologies detected, DNS provider identified, instructions tailored to your setup.
WebInspect Partner Program
We're expanding our network of trusted security professionals around the world. If you're a cybersecurity professional or company interested in delivering Expert Reviews to clients in your region, we'd like to hear from you.