We watch your site.
You get an email when security breaks.

Add your URL. We scan on a schedule. You get one email when a finding opens, and another if it's still open 24 hours later.

Start free trial 7 days free · then $19.99/mo · cancel anytime
Already have an account? Sign in
EverThread <alert@everthread.live> Today, 09:14 UTC
[new] TLS expires in 12 days on checkout.yoursite.com

The certificate on checkout.yoursite.com expires 2026-09-21 (12 days from now). Renew before then to avoid browser warnings.

Severity high · recipient list: 1 · see in your dashboard →

We scan on a schedule

One email when a finding opens. One more if it's still open 24 hours later. Quiet in between. Pick a cadence that fits your plan.

00:00
Watching
12:0018:0000:00 +1d06:00 +1d
Scan00:00 · all clear
Finding opens06:00 scan · security.txt missing
Email 13 recipients
Quiet scans12:00 · 18:00 · 00:00 · still open, no email
Email 206:00 scan · open 24h

How it works

Three steps. Then we run on a loop.

Set it up once. After that, every scan is automated and every change is documented.

1Setup

Add your site URL

Drop in the URL you want watched and an allowlist of hostnames the scanner may touch. The allowlist keeps us on the parts you care about.

2Loop

Scheduled, observation-only scans

A battery of probes runs on a tier-based cadence: TLS, headers, mixed content, exposed paths, well-known files. No brute force, no auth bypass, no exploit tooling.

3Alert

Email when something matters

A finding opening or regressing is one email. A finding staying unresolved past 24 hours is another. Quiet in between.

What we check

The issues that quietly open on a live site.

A focused, opinionated list. We pick the things that catch teams off guard and leave the rest to specialists.

01 · Transport

TLS expiry & chain

Certificate validity window, chain completeness, protocol support. Caught 30 days before expiry.

02 · Headers

Security headers

Content-Security-Policy, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy. Missing or weak values flagged.

03 · Content

Mixed content

HTTP subresources on HTTPS pages. The kind of regression that ships accidentally during a redesign.

04 · Paths

Exposed paths

Stale .env, .git, and /admin paths that survived a deploy.

05 · Crawlers

Crawler hygiene

robots.txt and sitemap.xml anomalies: missing files, broken directives, oversized sitemaps.

06 · Well-known

Well-known files

/.well-known/security.txt and other files the security community expects to find.

Observation only

We never attempt to bypass authentication, exploit a vulnerability, or interact with state-changing endpoints.

Pricing

Two plans. Monthly. Cancel anytime.

No annual lock-in at launch. Switch plans whenever; access continues through the end of the period you've paid for.

Starter

Weekly

$19.99per month · one site

  • Sites 1
  • Scan cadence Every 7 days
  • Email recipients Up to 3
  • Findings dashboard Severity filters
  • Re-emission guard 30 days
Start free trial

Create your account in 30 seconds. No card required for the trial. Subscribe from your dashboard when you're ready.

Pro

Every 6 hours · Most popular

$99.99per month · up to ten sites

  • Sites Up to 10
  • Scan cadence Every 6 hours
  • Email recipients Up to 10
  • Findings dashboard Audit chain & allowlists
  • Allowlists Per site
Start free trial

Create your account in 30 seconds. No card required for the trial. Subscribe from your dashboard when you're ready.

FAQ

Five questions we hear most.

Q.01Who owns the scan data?

You do. Findings are stored so your dashboard and audit chain work, and for nothing else. Delete a site and its history goes with it.

Q.02What does "observation only" mean in practice?

We make the same requests a browser or a crawler would: fetch pages, read headers, inspect certificates, request well-known paths. We never sign in, never submit forms, never send a payload.

Q.03How often do you scan?

Starter scans once every 7 days. Pro scans every 6 hours. Every scan is recorded so you can see exactly when a change appeared.

Q.04What happens if I downgrade?

Access continues through the end of the period you've paid for. When Starter begins, sites beyond your first are paused rather than deleted, so upgrading again picks up where they left off.

Q.05How do I cancel?

From your Whop billing portal, whenever you like. No emails to send, no one to call.

Start watching
in under a minute.

Create an account, add your site, and pick Starter or Pro. 7-day free trial on both. No card required up front — billing kicks in only if you stay.

Start free trialAlready have an account? Sign in