Know what's actually risky on your website.
Scanthra checks your domain passively and emails you a friendly PDF report — written for business owners, not pentesters. No CVE codes. No jargon. Just clear answers: what's wrong, why it matters, and how to fix it.
No account needed · Free to use · Results in under 2 minutes
C
example-shop.com
Scan complete · 8 findings
HIGH
Missing HSTS — visitors could be redirected to fake sites.
MED
Cookie without Secure flag — sessions may leak on public Wi-Fi.
OK
SSL certificate valid — encrypted connection works.
+ 5 more findings in your full PDF report.
📄
Friendly PDF report
Every finding explained in plain English with business impact and a DIY fix tip.
⚖️
GDPR & NIS2 mapping
See which findings touch GDPR Art. 32, NIS2 and OWASP Top 10 — useful for audits.
🛡️
Passive & safe
No aggressive scanning. We never log in, brute force or stress your server.
How it works
1
Enter your domain
Just your URL and an email. That's it.
2
Confirm by code
We email a 6-digit code so we know it's you.
3
We scan passively
Headers, SSL, cookies, CMS, email security & more.
4
Get your PDF
A clear report by email — usually within a minute.