Verified-ownership security reports

Know exactly where your website stands, on demand.

TCSR scans a domain you own, finds the exposures, and delivers a clear, AI-authored technical report — executive summary, prioritized findings, and a remediation roadmap. Downloadable PDF, independently verifiable.

We only scan domains after you prove you own them.

How it works

From domain to defensible report in four steps

Ownership first, scan second. Every report is tied to a verified asset and signed for verification.

01

Add your domain

Register the asset you want assessed.

02

Verify ownership

Prove control via DNS TXT, an HTML file/meta tag, or WHOIS email.

03

Run the scan

Our engine runs the modules your package allows — passive to full active.

04

Get your report

Gemini writes the narrative; download a verifiable PDF.

Packages

Scan depth that matches your need

Each tier unlocks deeper modules. Active scanning runs only against verified domains.

Insight

Passive OSINT

Non-intrusive reconnaissance from public data — no requests that touch you intrusively.

  • DNS, WHOIS & SSL/TLS
  • HTTP header & tech fingerprint
  • Subdomain & leak discovery
  • Public open-port view
Most popular

Assess

Passive + light active

Everything in Insight, plus targeted checks that need verified ownership.

  • Security header analysis
  • Exposed file checks (.git/.env)
  • TLS configuration testing
  • security.txt & dir listing

Audit

Full active

The deep tier — for audits, compliance, and legal-grade evidence.

  • Port scanning
  • Known-CVE matching
  • Vulnerability probing
  • Compliance mapping (KVKK/GDPR/ISO)

Monthly & yearly billing via Stripe. Pricing finalized at launch.

Your first finding could be the one that matters.

Add a domain, verify ownership, and see where you stand.