Your Security Health Check

One scan. One report. Zero fluff. An external security assessment of your business, done by a working network security engineer — not a vendor selling you something.

What you get

Three things. All of them useful.

1. Full attack surface + vulnerability scan

I scan your public-facing infrastructure the way an attacker would:

  • Open ports and services, with version detection (Naabu)
  • TLS certificates — full chain verification, not just the leaf
  • HTTP security headers (HSTS, CSP, and friends)
  • Subdomains discovered via Certificate Transparency
  • Vulnerability scan: Nuclei (9,000+ templates — CVEs, exposures, misconfigurations) + OpenVAS

2. Prioritized findings

Every issue is rated and explained in plain language:

  • Critical — fix this week (expired certs, exposed admin ports)
  • High — fix this month (certs expiring soon, missing HSTS)
  • Medium — fix when you can (headers, redirects)

No 400-item vulnerability dump. An AI agent verifies each finding against your live setup, so you get only what actually matters — no false positives.

3. One-page report

A single page you can hand to your owner, board, or insurer:

  • What I checked and when
  • Findings in priority order, each with a one-line fix
  • Your overall posture in one sentence

How it works

Pay €390. One-time, by card. No subscription, no upsell call afterwards.
A short form appears after payment. Enter your domain(s) — up to five, same price. Thirty seconds, no email back-and-forth.
Get your report within 5 business days. Scan, analysis, and the one-pager. If something critical shows up, I tell you first.
€390
one-time · up to 5 domains · delivered in 5 business days
Book your Health Check →

After payment you'll land on a 30-second confirmation form. The clock starts when you submit it.

Not ready? Try a free 10-second check of your site →

You work with small businesses? Refer clients, get your own check free →

Prefer not to wait for the next incident?

The Health Check is a snapshot. RiskiBits Monitor is the same checks, running daily — TLS, ports, and headers watched continuously, with a dashboard you can open in ten seconds. From $29/month.

Try Monitor →

Questions

What tools do you use?

A professional pipeline, not a single script: port and service discovery (Naabu), vulnerability scanning with Nuclei's 9,000+ templates and the OpenVAS database, plus TLS and header checks. An AI agent verifies each finding against your live setup before it reaches the report — then I review everything myself. You get my judgment, not raw scanner output.

Do you need access to my network?

No. This is an external assessment — I scan from the internet, like any visitor or attacker would. No credentials, no agents installed, no internal access.

What if nothing is wrong?

You get a clean report. That's worth something too: dated, signed evidence that you checked — useful for insurers, clients, and compliance conversations.

I'm an MSP with multiple clients. Can I book several?

Yes — email me the list and I'll quote a multi-client rate. Reply to [email protected].

Is this a sales pitch for more services?

The report is the product. If I find things worth fixing, they're in the report with the fix described. Whether you do them yourself or hire someone is your call.