Skip to content

Public preview scan

Scan a website with a safe, non-invasive preview.

One free preview per IP per 30 days, no account required. Create a free account for one limited scan per day. All previews are blurred until you verify ownership of the target and upgrade.

Safe, read-only preview

We check TLS, security headers, redirect behaviour, robots.txt, and a passive technology fingerprint. No payloads, no fuzzing, no authenticated checks, no destructive behaviour, no private IPs.

I confirm that I own the website at the URL above, or that I have written permission from the owner to run an automated security scan against it. Submitting unauthorized targets violates the NANOTESTING acceptable use policy.

One free preview per IP per 30 days. Full assessments require verified ownership.

Ready when you are

Enter a public website URL above to run a limited preview scan. We never test private IPs, localhost, or metadata endpoints.

Read-only

HTTP GET, DNS, TLS, headers. No payloads, no fuzzing, no DoS.

Rate-limited

One preview per IP per 30 days. Anonymous traffic is hashed.

Blurred preview

Findings are masked until you verify ownership of the target.

What this preview costs you to ignore

A two-week manual audit averages $5K–$50K, and roughly half of that budget is spent on findings you could have closed for $99 a month.

HSTS, SameSite cookies, leaked tokens, exposed.envfiles, outdated dependencies — these aren't the bugs that need a $300/h reviewer. Run the preview here, then sign up to see the locked findings.