We built ShieldReport to make professional-grade website security accessible to every team — not just enterprises with six-figure budgets. To prove that, we're doing something unusual: during our launch period, every plan is completely free. No credit card. No usage limits. No catch.
What "Free During Launch" Actually Means
This isn't a stripped-down free tier with artificial limitations. During the launch promo, you get full access to every ShieldReport plan and every feature — the same tools that security consultancies charge thousands of pounds to run manually. Here's what's included:
- Unlimited domain scanning — add as many domains as you need and scan them all.
- Full OWASP Top 10 coverage — automated testing for cross-site scripting, SQL injection, security misconfigurations, and every category in the OWASP Top 10.
- TLS/SSL analysis — certificate validation, cipher suite assessment, protocol version checks, and HSTS verification.
- Security header audit — Content-Security-Policy, X-Frame-Options, Permissions-Policy, and every header that protects your users.
- DNS and email security — SPF, DKIM, and DMARC record analysis to prevent domain spoofing and phishing.
- AI-powered remediation — every finding comes with a plain-English explanation and a code-level fix you can copy-paste.
- Branded PDF reports — white-label reports you can send directly to clients, stakeholders, or compliance teams.
- Subdomain discovery — automated enumeration of subdomains to find forgotten or shadow-IT assets.
- Port scanning — identify open ports and exposed services across your infrastructure.
- Scheduled scans — set daily, weekly, or monthly scans and get notified when new vulnerabilities appear.
Why We're Giving It Away
ShieldReport is new. We believe the product speaks for itself, but we also know that trust is earned, not assumed. By removing the price barrier entirely, we let you evaluate ShieldReport on its merits — run real scans against your real domains and decide based on the results.
We also want feedback. Every scan you run, every report you generate, and every bug you report helps us build a better product. Early users shape the roadmap.
How to Get Started (It Takes 60 Seconds)
Getting your first security report is genuinely fast:
- Sign up — create a free account at shieldreport.co. No credit card needed.
- Add your domain — enter the domain you want to scan (e.g., example.com).
- Verify ownership — add a DNS TXT record or upload a verification file. This ensures you only scan domains you own.
- Run your scan — hit the scan button and ShieldReport's engine does the rest. Most scans complete in under 60 seconds.
- Read your report — findings are categorised by severity (critical, high, medium, low, info) with remediation steps for each one.
What Your Report Covers
Each ShieldReport scan produces a comprehensive security assessment across multiple categories:
- TLS configuration — protocol versions, cipher suites, certificate validity, and HSTS deployment.
- HTTP security headers — presence and correctness of Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, and more.
- Cookie security — Secure, HttpOnly, and SameSite attribute checks on all cookies.
- OWASP vulnerabilities — active testing for injection flaws, broken authentication, sensitive data exposure, and misconfigurations.
- DNS hardening — DNSSEC, CAA records, SPF/DKIM/DMARC for email security.
- Information disclosure — server banners, technology fingerprinting, exposed debug endpoints.
Every finding links to our vulnerability wiki with detailed technical explanations, real-world attack scenarios, and step-by-step remediation guides.
How Long Does the Promo Last?
The free launch promo runs until we announce otherwise. We'll give plenty of notice before transitioning to paid plans — and early users will get the best possible pricing when that happens. There's no deadline pressure, but the sooner you start scanning, the sooner you know where you stand.
Who Is This For?
ShieldReport is built for developers, agencies, and small-to-mid-sized businesses who need professional security scanning without the enterprise overhead. If any of these describe you, the free launch is designed for you:
- You manage client websites and need to demonstrate security compliance.
- You're a startup that handles user data and needs to get security right from day one.
- You're a developer who wants automated security checks in your workflow.
- You're a small business owner who wants to know if your website is safe.
Sign up free at shieldreport.co and run your first scan today. No credit card, no commitment — just answers about your website's security posture.