Hi Product Hunt 👋 I'm Jani, a solo developer behind J-Prompt. I do WordPress maintenance and development and build small apps. OwlAudit is one of them.

What the free audit checks (no account):

• Security headers: HSTS, CSP (incl. unsafe-inline/unsafe-eval), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, plus Server/X-Powered-By leaks

• SSL certificate: validity, expiry, issuer, self-signed, chain

• CMS/platform detection (WordPress, Drupal, Joomla, Shopify, Wix, Squarespace, Magento, PrestaShop) and the version it exposes

You get a letter grade (A+ to F) and the fixes.

Paid plans add:

• Starter ($9): PageSpeed/Lighthouse score, weekly or monthly scheduled audits

• Pro ($29): exposed-file probes (.env, .git, backups, debug logs, DB dumps, open directories), WordPress checks (core vs latest, user enumeration, XML-RPC), analytics + consent-banner check, PDF reports, daily audits

• Agency ($59): OWASP probes (SQLi, XSS, open redirect, cookie flags, HTTP methods), white-label PDFs, team seats, API

To be clear, it's not a pentest or a CVE scanner, and it doesn't check plugin versions.

Founding offer: the first 50 customers get 40% off for life, applied automatically at checkout.

I'd love your feedback: run it on your own site and tell me what's wrong, missing or confusing. Which check should I build next?