We check your website for security vulnerabilities

• DOM-based reflected XSS (JavaScript code injection)
• reflected SQLi: error-based and blind SQL injection (MySQL and MSSQL)
• reflected CRLF injection by 302 http response splitting
• click jacking and cross site request forgery
• session riding and hijacking
• spam prevention by displayed email addresses
• potential spyware/malware by used external JS, images and iframes
• a maximum of 100 unique GET pages and 20 POST (for the injection tests)

• stored XSS,SQLi and CRLFi
• user inputs beyond GET and POST
• dDoS resistance
• business logic flaws
• CRLF injection issues caused by HTML forms (like form mail spam)
• JavaScript and CSS rendering beyond simple pattern detection

These tests will give you a basic overview about your potential security vulnerabilities. The tests are fully automated and detect a maximum of one critical issue per type. It takes somewhere between a few minutes and three hours to complete all the tests dependent on the size of your website and where the critical issues occur (if detectable). The tests run in your browser. So make sure you are able to keep your machine connected to the internet and keep your browser open until the check is finished. You'll get the report immediately after all the tests are done.

More detailed tests and reports can be pre-ordered after your site got through the basic tests.