What Our Scanner Checks
Fixspert's free cybersecurity scanner runs an automated 15-point audit against any publicly-reachable website. The result is a structured report that mirrors what a junior pentester would deliver — minus the consultant fee. Each check is named, explained, and graded (pass / warn / fail) with actionable remediation steps.
SSL/TLS configuration
Certificate validity, chain completeness, protocol versions (TLS 1.2 / 1.3 supported; TLS 1.0 / 1.1 deprecated), and cipher-suite strength. Catches expired certs, self-signed certs, weak ciphers, and missing intermediate certificates.
DNS records (SPF / DMARC / CAA)
Verifies SPF records exist and aren't overly permissive (no +all or?all), checks DMARC policy alignment, and confirms CAA records pin which certificate authorities are allowed to issue certs for the domain.
Open ports
Scans the most common TCP ports (22, 80, 443, 3306, 5432, 6379, 27017, …) and flags anything that shouldn't be internet-exposed — like a Postgres port visible to the whole world.
Exposed files
Probes for common sensitive files that should never be web-accessible:.env, .git/config, backup.zip,phpinfo.php, wp-config.php.bak, and similar.
Leaked secrets
Inspects publicly-served JavaScript bundles and source maps for high-entropy strings that look like API keys, AWS credentials, Stripe keys, or database URLs accidentally shipped to the browser.
Security headers
Validates presence and correct values for HSTS, X-Content-Type-Options, X-Frame-Options, Content-Security-Policy, Referrer-Policy, and Permissions-Policy. Missing headers are explained and remediation snippets are provided.
CORS, cookies, tech fingerprinting
Detects overly-permissive CORS (Access-Control-Allow-Origin: * with credentials), flags cookies missing Secure / HttpOnly / SameSite attributes, and identifies the tech stack (server, framework, CMS, CDN) so you know what's exposed.
Security Hardening Services
Once you have the audit report, a verified cybersecurity engineer can help you actually fix what's broken. Common hardening engagements include:
- Post-breach response — forensics, containment, eradication, and recovery after a confirmed compromise.
- Malware removal — cleaning injected scripts, backdoors, and credit-card skimmers from compromised sites.
- Firewall configuration — WAF rules, iptables, cloud security groups, and rate-limiting policies.
- Infrastructure hardening — locking down SSH, removing unused services, rotating exposed secrets, and tightening DNS records.
All hardening work is escrow-protected — you only pay when the re-scan comes back clean.
How to Get a Security Audit
- 1. Run a free scan. Enter your domain on the Cybersecurity Scan page. The scan runs in seconds and returns the full audit report.
- 2. Review the report. Each check is graded pass / warn / fail with an explanation and remediation hint. No login required to read the report.
- 3. Hire an expert to fix. If the report flags issues you can't fix yourself, post a cybersecurity task. Verified engineers will bid, and you can pick based on per-skill reputation.
Security Best Practices
- Rotate any secret that shows up in your scan — assume it's already compromised.
- Enforce HTTPS site-wide with HSTS; redirect all HTTP traffic.
- Lock down database and admin ports to known IPs, not the public internet.
- Set DMARC to
rejectonce you've validated SPF alignment. - Review CSP monthly — every new third-party script needs an explicit allow-list entry.