The Security Report You Can Get in a Minute (and What It Costs)

A security report shouldn't take two weeks and a €390 invoice. For the fast, cheap picture — what your site exposes to the internet right now — you can get a real report in about a minute. Here's exactly what it covers, what it costs, and when you still want a human on top of it.

What the report checks

You enter one domain. The engine looks at it from outside, the way an attacker maps a target — nothing installed, no credentials asked. Four surfaces:

• Perimeter. Eighteen ports probed — databases (MySQL, PostgreSQL), admin panels (RDP), the Docker API, VNC. Plus the TLS certificate and how many days of life it has left.
• Web hardening. The headers that matter (HSTS, CSP, X-Frame-Options…), cookies without their security flags, mixed HTTP content, and whether plain HTTP is actually redirected to HTTPS.
• Email posture. SPF, DMARC and CAA read live from your DNS. If anyone can send email as your domain, the report says exactly that.
• Exposure. The classic leaks — an exposed .git, a .env file, a phpinfo page — the mistakes that hand over source code and credentials. Plus subdomains on public records.

The part that makes it a report, not a number

A free scanner gives you one thing on one surface and a score. This is a document: every finding rated critical → info, each with a one-line fix, and the evidence behind it — which ports are open, which headers are missing, what your DNS says. It's scored 0–100 so you can see at a glance, and it's written so the person who owns the business (not just the one who runs IT) can act on it.

What it costs, and when that's the wrong tool

€29, one-time. No account, no subscription. The scan runs the moment you submit — typically 30 to 90 seconds — and the report lands on screen and in your inbox with a link you keep.

It's the same perimeter I check for every client, just automated and instant. It does not run a vulnerability scan (Nuclei + OpenVAS) or review each subdomain — that's the Security Health Check, €390, where I add my judgment on top. And if you'd rather not re-check by hand every month, RiskiBits Monitor runs the same checks daily and only emails you when something critical changes.

The right order

If you want the fast, cheap picture of where you stand today — start here. It's a fraction of a consultant's hour, and it tells you the honest answer: what's exposed, what's missing, and what to fix first. Then decide whether you need the full work on top.