Security monitoring
They tend to build up over time: a missing browser security setting, a server that shows anyone which software version it's running, or a new third-party script on your page. Your site can look and load perfectly while still leaving gaps, like one that lets someone hide your page inside theirs to trick visitors into clicking things (clickjacking). SiteVitals keeps checking for these weak spots and tells you when it finds one.
External, read-only monitoring. Nothing installed on your site.
What continuous monitoring covers
These seven areas map directly to the seven security scanners SiteVitals currently runs. We group the individual findings so you can understand the risk without having to decipher a long list of raw checks.
01
Checks the instructions your server gives the browser, including protections against clickjacking, unsafe content execution and other common browser-level weaknesses.
Includes
02
Checks whether cookies are configured with the protections browsers provide for keeping session data away from scripts and inappropriate cross-site requests.
Includes
03
Looks for risky JavaScript patterns and suspicious inline code that can indicate unsafe implementation or something worth investigating.
Includes
04
Checks whether an HTTPS page is still pulling scripts, styles, images or frames over an insecure connection.
Includes
05
Looks for patterns that can indicate injected or unexpected page content, including things which may not be obvious when someone simply visits the site.
Includes
06
Reviews forms for security-relevant patterns and submission behaviour, particularly around login, password and user-input surfaces.
Includes
07
Identifies software and server information exposed by the page, then uses version information where available to surface known vulnerabilities.
Includes
See it in action
This is an actual SiteVitals security report, not a screenshot. Open the findings, see what was checked and how the report explains the things worth paying attention to.
The free check gives you a report like this for your own page. Continuous monitoring keeps repeating the checks so you can see when something changes.
Check your own siteHow security monitoring works
SiteVitals scans your live pages from the outside, so there is no plugin, agent or monitoring script to install. The first scan gives you a baseline; later scans let you see whether a protection has disappeared, a new risk has appeared or exposed software information has changed.
That matters because many of these issues are regressions. A header can disappear after a configuration change. A plugin can expose information that was previously hidden. A third-party dependency can alter without anybody changing your own code.
Findings are scored and explained in the report so you can decide what actually needs attention, rather than treating every technical observation as an emergency.
Get started with our free tools today. When you're ready for continuous security monitoring, our plans are simple, transparent, and built for sites of all sizes.
If something isn't covered here, just ask us. We're a small team and we answer our own emails.
Free security snapshot
The free security check takes a read-only look at your public page and reports the kinds of browser protections, exposed software information and other security signals an automated scanner can see.
It is not a penetration test and it does not attempt to exploit anything. Nothing is installed or changed on your site.
Want SiteVitals to keep checking? Start continuous monitoring ↗
