Frequently Asked Questions

Security work is led by our founder, Isaac Spitz — a full-stack developer who penetration-tests every site we build before it goes live, and who takes on authorized security engagements under signed client contracts. You can read more on our About page.

Yes. You may only scan a domain you own or have written authorization to test. The scan reads only publicly available information and behaves like an ordinary visitor to your homepage — but running it still requires that you are authorized. See our Scan Terms & Acceptable Use for the full policy.

It is non-intrusive and read-only. It checks public information such as DNS records, your TLS/SSL certificate, HTTP security headers, cookie flags, HTTPS enforcement, and SPF/DMARC email records. It does not attempt to exploit anything, log in, brute-force, or access any private data.

Never. All active security testing is performed only on systems our clients own or have given us written authorization to assess, under a signed rules-of-engagement. Unauthorized testing is against our terms — and the law.

The free scan is an automated perimeter check of your public surface. A full penetration test is a separate, paid engagement where we manually test in-scope systems in depth, under a signed agreement, and deliver a human-reviewed report with prioritized findings and remediation guidance.

No. We provide our own assessment report and a dated attestation of the work we performed, and we can help you prepare for formal, independent audits. Formal certifications are issued only by accredited third-party auditors — not by us.

To operate the tool and prevent abuse, we log the domain submitted, the requesting IP address, browser user-agent, and timestamp. We do not sell this data. Contact us with any questions or deletion requests.

Yes! You receive full rights to the website source code. You can request a download at any time through your client portal. The source code is yours to keep, even if you cancel your hosting.

We purchase and manage the domain on your behalf. While your hosting is active, the domain is fully yours to use. If you decide to leave, we can negotiate a transfer of the domain to you.

You can cancel anytime through your portal. Your website stays live until the end of your current billing period. You can download your source code before or after cancelling — it's yours.

Absolutely! That's our entire model. We build your website first and show it to you at a preview link. You only pay if you love it. Zero risk, zero commitment to view.

The monthly fee covers server hosting, SSL certificate, domain management, and access to your client portal with analytics. It does not include maintenance, content updates, or modifications — those are quoted separately.

Any modifications or additions after delivery are quoted separately based on complexity. Simple text changes, new features, booking systems, e-commerce — we can build whatever you need at a fair price.

Once you approve and pay, your website can be live on your own custom domain within 48 hours. The preview is usually ready within 24 hours of us finding your business.

Yes! Your client portal includes a real-time analytics dashboard showing total visits, monthly visits, and a 30-day trend chart. You'll always know how your website is performing.

No long-term contracts. You pay the one-time build fee and then month-to-month hosting. Cancel anytime. The first 3 months of hosting are completely free.

Yes! We offer custom add-ons including booking and appointment systems, customer portals, e-commerce, and any other custom development. These are quoted based on your specific needs.