For agencies
Every client site. One security dashboard.
Monitor the scripts, policies and headers of your whole portfolio from one place, and turn client-side security into a service your clients pay for. EU-hosted.
Fifteen sites is fifteen attack surfaces
No time to babysit
You ship sites weekly. Nobody on the team has hours to review raw violation reports per client.
Clients want proof
"Are we secure?" deserves better than a shrug. You need something credible to show, in plain words.
PCI landed on your desk
Your merchant clients forward the auditor's questionnaire to you. 6.4.3 and 11.6.1 are now your job.
For your portfolio
Agency features, built in.
Everything you need to run security for a book of clients, included in one plan.
Your whole portfolio, at a glance
Every client site on one screen: security score, report volume, open advisories. Green means move on. Red means you knew before the client did.
- Health and score per site
- CVE flags on client scripts
- Drill into any site in one click
Scoped to how agencies work
Sites grouped per client, access scoped per project, alerts routed per team. Your juniors see their clients, not your whole book.
- Per-client groups
- Team access per project
- Alert channels per client
Nothing to install
One response header per client site and reports flow from real visitor browsers.
- 12 report types, one header
- Real production traffic
- Zero performance impact
CSP builder
Build and refine each client's policy from what their traffic actually loads.
- Generated from real reports
- Report-only first, enforce when clean
- Catches what a crawler misses
PCI DSS evidence
Auditor-ready 6.4.3 and 11.6.1 evidence for every merchant client.
- Payment-page script inventory
- Justification workflow
- Auditor-ready exports
Supply-chain
Know every script your clients ship, and get flagged the moment one gains a CVE.
- Script SBOM per site
- Known-CVE detection
- New-script alerts
How it works
A new client takes five minutes
No agent, no SDK, no code changes on client sites. Browsers report natively.
01 - Add
Create the site in your dashboard.
Group sites per client, invite your team, set who sees what.
02 - Connect
Paste one response header.
Reports start flowing from real visitor browsers immediately. Zero performance impact.
03 - Deliver
Route alerts, share the evidence.
Send each client's incidents to the right channel and forward monthly proof that their site is watched.
'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20offset='0'%20style='stop-color:%235a62c3'/%3e%3cstop%20offset='.5'%20style='stop-color:%234d55bd'/%3e%3cstop%20offset='1'%20style='stop-color:%233940ab'/%3e%3c/linearGradient%3e%3cpath%20d='M21.8%20125h218.3c12.1%200%2021.8%209.8%2021.8%2021.8v218.3c0%2012.1-9.8%2021.8-21.8%2021.8H21.8C9.8%20387%200%20377.2%200%20365.2V146.8c0-12%209.8-21.8%2021.8-21.8'%20style='fill:url(%23microsoft-teams_svg__SVGID_1_)'/%3e%3cpath%20d='M188.4%20208.1h-43.6v118.8H117V208.1H73.5V185h114.9z'%20style='fill:%23fff'/%3e%3c/svg%3e)
'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20offset='0'%20style='stop-color:%231d93d2'/%3e%3cstop%20offset='1'%20style='stop-color:%2338b0e3'/%3e%3c/linearGradient%3e%3ccircle%20cx='256'%20cy='256'%20r='256'%20style='fill:url(%23telegram_svg__a)'/%3e%3cpath%20d='m173.3%20274.7%2030.4%2084.1s3.8%207.9%207.9%207.9%2064.5-62.9%2064.5-62.9l67.3-129.9-169%2079.1z'%20style='fill:%23c8daea'/%3e%3cpath%20d='m213.6%20296.3-5.8%2062s-2.4%2019%2016.5%200c19-19%2037.2-33.6%2037.2-33.6'%20style='fill:%23a9c6d8'/%3e%3cpath%20d='m173.8%20277.7-62.5-20.4s-7.5-3-5.1-9.9c.5-1.4%201.5-2.6%204.5-4.7C124.6%20233.1%20367%20146%20367%20146s6.8-2.3%2010.9-.8c2%20.6%203.6%202.3%204%204.4.4%201.8.6%203.7.5%205.5%200%201.6-.2%203.1-.4%205.4-1.5%2023.8-45.7%20201.6-45.7%20201.6s-2.6%2010.4-12.1%2010.8c-4.7.2-9.3-1.6-12.6-4.9-18.6-16-82.8-59.2-97-68.6-.6-.4-1.1-1.1-1.2-1.9-.2-1%20.9-2.2.9-2.2s111.8-99.4%20114.8-109.8c.2-.8-.6-1.2-1.8-.9-7.4%202.7-136.2%2084.1-150.4%2093-.9.2-2%20.3-3.1.1'%20style='fill:%23fff'/%3e%3c/svg%3e)
The dashboard
Everything happens in one place.
Reports, scores, alerts and evidence for every client site, behind one login.
- 250+
- agency sites monitored
- 1.5B
- reports ingested
- 82.5k
- websites analyzed
- Full
- Reporting-API support
With our workflow fully integrated, every website is wired to the right team, new scripts are detected automatically and tracked directly in each client's Slack channel. It has streamlined our entire process.
Built to be resold
The client-facing layer is included: reports, alerts and exports you can hand straight to your clients.
Reports your clients actually read
Scores, trends and incidents in plain language. Forward the monthly evidence, keep the retainer conversation short.
Alerts where each client lives
Slack, Teams, Google Chat, Telegram, email or webhook, routed per client.
Scans and CVE detection included
Automated scanning and script advisories ship in the Pro plan, not a higher tier.
API and MCP
Pull anything into your own tooling and reports, or drive it with AI.
FAQ
Frequently asked questions
Running client-side security for a portfolio, answered.
Put your portfolio under watch this afternoon.
Start with one client site, add the rest when you're convinced.