Know when your website is at risk.
Most small businesses don't have a security team. Royals Security checks your site, explains what to fix in plain English, and tells you when something changes, like a certificate about to expire.
Free check. No account or card needed. Results in under a minute.
- Website91
- Domain78
- Email64
- Configuration89
- HighDMARC policy is missing
- MediumNo Content Security Policy
- LowReferrer-Policy isn't set
What a scan looks at
The six places small-business websites most often go wrong.
Certificate
Whether your HTTPS certificate is valid, matches your domain, and how long until it expires.
Validity, expiry, hostname, TLS version
Security headers
The browser instructions that block clickjacking, script injection and data leaks.
HSTS, Content Security Policy, frame and referrer rules
Whether someone could send email that looks like it came from your domain.
SPF, DMARC, DKIM
Domain and DNS
The settings that keep your address pointing at your site, and when your domain expires.
Name servers, DNSSEC, IPv6, domain expiry
Exposed files
Files that should never be public, like configuration files, backups and source folders.
.env files, backups, Git folders
Availability
Whether your site responds, how fast, and whether it redirects where it should.
Uptime, response time, redirects, mixed content
How it works
Scan
Enter your address and confirm it's yours. Safe, read-only checks run in under a minute.
Understand
You get a score out of 100, and every issue explained in plain words with steps to fix it.
Monitor
Save the report to your account. Daily re-checks with email alerts are coming to paid plans.
Hear about it before your customers do.
Websites change without anyone noticing: a hosting update drops a security setting, a certificate runs out. With monitoring, Royals Security re-checks every day and sends one clear email when something important changes. Harmless changes stay quiet.
Daily monitoring arrives with the paid plans.
Security change detected
How we scan
A security tool should be safe to point at your own website.
Read-only, always
We look at what any visitor's browser can see: pages, headers and public DNS records. No password guessing, no exploits, nothing that could harm your site.
Only websites you control
You confirm you own the site before every scan. The scanner also refuses private and internal addresses, so it can't be turned against anyone's network.
We don't keep what we find
If a sensitive file is exposed, we record that it exists, never what's inside it.
An honest score
Royals Security is an assessment, not a guarantee. A high score means we didn't find common problems, not that a site can't be attacked.
Pricing
The free check works today. Paid plans add daily monitoring and open soon. Create a free account and we'll tell you when they do.
- Security score and findings
- Plain-English fixes
- Exposed files check
- Save reports to your account
- Everything in Free, checked daily
- Email alerts and score history
- Advanced email security
- Certificate authority rules
- Domain expiry alerts
- Everything in Starter
- Software version checks
- Third-party script changes
- Certificate Transparency watch
- Blocklist reputation
- PDF reports
- Everything in Business
- Subdomain monitoring
- Client dashboards
- White-label reports
Questions
Something else? Contact us.
Is this a penetration test?
No. Royals Security runs safe, read-only checks on settings anyone can see. It never tries to break in, guess passwords or exploit anything.
Does a good score mean my site is secure?
No honest tool can promise that. A high score means we didn't find the common problems we check for. It's a strong start, not a guarantee.
What exactly do you check?
Your certificate, security headers, email settings, DNS and domain expiry, files that shouldn't be public, and whether your site is up. The full list depends on your plan.
Can I scan any website?
Only websites you own or are allowed to test. You confirm this before every scan.
Do I need to be technical?
No. Every finding says why it matters and how to fix it, in steps you can follow yourself or pass to whoever runs your site.
Can I cancel a paid plan anytime?
Yes. When paid plans open, you'll be able to cancel from your account at any time.
Check your website now.
It takes under a minute, and nothing on your site is changed.