Last updated 7 September 2026
Scan44 performs a passive security check of a website you name. We make the same kind of requests any visitor's browser makes, read the responses, look up public DNS records, and produce a report describing what we found and how to address it.
By using this service you agree to these terms. If you do not agree to them, do not use the service.
We do not attempt to gain access to any system. We do not try passwords, submit forms, inject data, exploit weaknesses, or do anything intended to change, damage or disrupt the site being checked. Every check is read-only and made from outside.
Because our checks are passive and made from outside, they cannot find everything. Problems that are only visible from inside your application, or that need a login we do not have, will not appear in our report. Your compiled front-end code is an exception, because your visitors download it too: we read the page and the scripts it loads, which is how a key or a source map left in them is found.
By submitting a website address you confirm that you own that website, or that you have permission from its owner to have it checked. You are responsible for that permission, not us.
You must not use this service to:
We may refuse or stop any check at our discretion.
The report describes what our checks observed at one moment in time. Websites change, and a result that was accurate when the check ran may not be accurate later.
A clean report does not mean your site is secure. It means our specific checks did not find the specific problems they look for. This service is not a penetration test, not a security audit, and not a substitute for professional security advice. Do not treat it as evidence of compliance with any standard, regulation or contractual obligation.
We work to keep our checks accurate, but we cannot guarantee that every finding is correct or that no problem was missed. If you believe a finding is wrong, tell us. We want to know.
The report contains suggested steps for addressing what we found. They are written to be generally correct for the platform we detected, but we cannot see your configuration and we do not know what else depends on it.
Take a backup before making changes. You are responsible for any change you make to your own systems, including changes made by following our instructions. If you are not confident, ask whoever maintains your site.
Running a check and seeing how many issues were found, and how serious they are, is free. The full report is a single payment of $19. There is no subscription and nothing recurring. You are charged once, for one report.
Prices are in US dollars. If any sales tax or VAT applies where you live, it is added and shown to you at the checkout before you pay, so the amount on the checkout screen is the amount you are charged.
Payments are handled by Whop, who process the transaction and hold any card details. We never see or store your card information. Your card statement will show the payment provider rather than Scan44, which is normal and is not a duplicate charge. Refunds are described in our refund policy.
A payment covers one website: the address you entered when the report was made. You may re-check that same address as often as you reasonably need, free, for 30 days after purchase, so you can confirm each fix has worked. The report itself stays readable for 90 days.
Re-checking always looks at the address already in the report. Checking a different website is a separate report and a separate payment, however many sites you own.
Re-checks are spaced a few minutes apart and capped daily. The spacing is not an inconvenience for its own sake: a check makes around ninety requests, so checking again immediately tends to make your own site refuse us, and a change to DNS or a CDN takes a few minutes to become visible anyway.
Because we do not ask you to create an account, your report is reachable only through the unique link generated when the check ran. Anyone holding that link can view the report.
Save the link. A report you have paid for is kept for 90 days. A scan nobody paid for is kept for two days, or for two weeks if you started a payment for it, so that a payment which arrives late still has a report to open. After that it is deleted permanently and cannot be recovered.
The service is provided as it is, without warranties of any kind, to the fullest extent the law allows.
We are not liable for indirect or consequential loss, including lost profit, lost data, lost business or reputational harm, arising from your use of this service or from anything in a report. Where liability cannot be excluded, it is limited to the amount you paid us for the report in question.
Nothing in these terms limits liability that cannot lawfully be limited.
We may update these terms. The version in force is the one published here when you use the service, and the date at the top shows when it last changed.
These terms are governed by the laws of the country from which this service is operated. If you are a consumer resident elsewhere, this does not deprive you of the protection of any mandatory consumer law of your own country.
Reach us at support@scan44.com.