ShieldWave
Website security check in plain language, free, in 90 sec
Start new thread

ShieldWave - Website security check in plain language, free, in 90 sec

by•
Type your address. In about 90 seconds ShieldWave runs 20+ outside checks and shows your score and the most serious problems in plain language. The full report adds a fix list sorted by urgency and a brief to send your developer. Free check, no account, no password. A full report for one site is $9 once. Pro is $12 a month for up to 25 sites with scheduled scans and alerts. Plus a free WordPress plugin, Ensomedia Security, with 24 checks from inside, two-factor login included.

Add a comment

Replies

Best
Maker
📌
Hi Product Hunt, I am Radosław. I run ENSOMEDIA, a one-person studio in Poland, and I build and maintain websites for small businesses. I built ShieldWave myself, so if you reply here or write to , you are talking to the person who wrote the code. The problem. Bots send every website the same probes. They request backup archives, read plugin versions from readme files, look up DMARC records and test for TLS 1.0. Automated traffic was 51% of all web traffic in 2024 according to the 2025 Imperva Bad Bot Report, and AI keeps making vulnerability discovery cheaper, as Google's Big Sleep and DARPA's AI Cyber Challenge showed. Owners rarely know the answers for their own site. What ShieldWave checks. More than 20 things from the outside: SSL/TLS, WordPress core, plugins and themes, exposed files and backups, SPF, DKIM and DMARC, malware, spam links and redirects, open ports, subdomains and APIs, and security headers and cookies. SQL injection and XSS tests on forms run only after you verify the site is yours. What you get. A score, findings sorted by urgency, and a brief you can forward to your developer. Every finding says why it got its severity and gives a command to confirm it yourself. Pricing. Free: 5 checks a month for one site, score and top three problems, no account. Full report for one site: $9, once. Pro: $12 a month for up to 25 sites, unlimited scans, scheduled scans with email alerts and the developer brief, with a 7-day free trial. For WordPress. The free Ensomedia Security plugin is in the WordPress.org directory: It runs 24 checks from inside: malware and backdoors, files compared with the official WordPress.org copies, known vulnerabilities, login protection with two-factor login, scheduled scans and email alerts. Free, no account. What it is not. It is not a penetration test. It catches the common holes bots look for. Run it on your own site and tell me what was unclear in the report. That feedback is the most useful thing you can give me today.