For freelancers and web agencies
Continuous website security monitoring
Configuration drifts. A plugin update, a new CDN rule or a server migration can quietly remove a security header. Scheduled scans catch it.
What drift looks like
- A WordPress plugin update replaces the headers your theme was sending.
- A CDN rule change strips Strict-Transport-Security or the Content-Security-Policy.
- A hosting migration moves the site to a server with default settings.
- A cache or proxy change drops a security header from some responses.
- A TLS certificate approaches expiry or is replaced with one for the wrong hostname.
What each state means
- New: found in this run and not in the previous one.
- Improved: the same check scored better than last time, for example from failing to passing.
- Regressed: the same check scored worse than last time. A verified fix that comes back is reopened automatically.
- Resolved: listed in the previous run and no longer reported in this one.
Frequency by plan
Pro: weekly or monthly. MSP / Team: daily, weekly or monthly. Free does not include scheduled monitoring.
How monitoring works
- Create a schedule for an authorized website: weekly or monthly on Pro, and as often as daily on MSP / Team.
- Each run produces a retained report compared with the previous one.
- Findings are marked new, improved, regressed or resolved.
- Email notification when a scheduled run finishes, and optional signed webhooks.
Limits
Pro monitors up to 5 websites. MSP / Team includes 5 users. Each user can monitor up to 25 websites; the shared client list and Security Center hold up to 25 websites per workspace. Monitoring requires domain verification. Slack and Microsoft Teams notifications and monthly executive summaries are planned.
Frequently asked questions
Do I need to confirm authorization again for scheduled scans?
You confirm continuing ownership or authorization when you create each schedule.
What happens when a pass expires?
Scheduled monitoring pauses and exports stop, and the account returns to Free. Reports, findings and history are kept, and monitoring resumes when a new pass starts.