Can I scan a client's website with SecuProbe?

Yes. Passive scans work on any public site. Active tests require the domain's ownership to be verified with a DNS record or a file, which your client or your team adds once.

What does a client receive after an audit?

The client receives a PDF report with the security score, the findings sorted by severity and the recommended fixes, or a read-only link to the same report.

How many client sites can I manage?

The number of domains depends on your plan. The Pro plan is designed for agencies and consultants who manage several client sites; the exact limits are on the pricing page.

Can several people in my agency use the same account?

Yes. Team plans let you invite colleagues to a shared workspace where each person has their own login and role.

For agencies

Security audits for every client website

SecuProbe lets agencies and freelancers audit the sites they build and maintain, keep watching them after delivery and hand each client a report they can understand.

Create a free account View pricing

Security is now part of the deliverable

Clients assume that the site an agency delivers is secure, and they hold the agency responsible when it is not. Yet few web agencies have a security specialist, and a manual audit for every project would cost more than many of the projects themselves.

SecuProbe makes a security check a normal step of delivery, like a performance test or a browser check. It takes minutes, it produces a document, and it can be repeated for every client.

Audit before you deliver

Before a site goes live, run a scan and fix what it finds. SecuProbe checks security headers, SSL/TLS configuration, exposed files such as backups and environment files, outdated front-end libraries with known CVEs, and DNS and email settings such as SPF, DKIM and DMARC.

On a domain you have verified, SecuProbe adds active OWASP Top 10 tests: SQL injection, cross-site scripting, CSRF and CORS misconfiguration. Each finding includes a remediation guide, so the developer who built the site can correct it without outside help.

One dashboard for all your clients

Add each client domain to the same account and see every score in one place. The history of each domain shows when it was scanned, what was found and how the score has moved since.

With a team plan, several people in the agency share the same workspace, each with their own login. The number of domains and members depends on the plan and is listed on the pricing page.

Watch sites after delivery

A site that was secure on launch day does not stay secure by itself. Plugins age, certificates expire and new vulnerabilities are published for libraries already in use. SecuProbe scans each domain on the schedule you choose and alerts you when the score drops.

For an agency this turns a one-off project into a maintenance service: you know about a problem before the client does, and you have the evidence to justify the intervention.

Reports your clients can read

Every scan can be exported as a PDF report with the score, the findings by severity and the recommended fixes. Several report templates are available, from a technical layout for developers to an executive summary for decision makers.

You can also share a read-only link to a report, so the client sees the result without needing an account.

Verification protects you and your clients

Active tests only run on domains whose ownership has been verified with a DNS record or a file. For an agency this is a safeguard: it proves that the client authorised the test and it prevents anyone from scanning a site they do not manage.

Verification is done once per domain and takes about two minutes. Passive checks, which only read what a site exposes publicly, do not require it.

Automate with the API

Agencies that deploy with a pipeline can launch SecuProbe from GitHub Actions or from the REST API and stop a deployment when a critical vulnerability is found. Webhooks send scan results to your own tools when a scan completes.