Paste the business’s own website. The free scan reads what is public and prices what it finds.
Its pages, the code it sends to visitors, and the servers, DNS and certificate behind it.
Leaked keys, open data, unprotected endpoints, forgotten deployments, features that do nothing.
Each finding in dollars, and what that takes off the asking price.
Free always
You give it the website address. It reads:
20 checks, and a priced report.
No account and no card, and no limit on how many you run. The seller is not told.
$99 per scan
The seller connects whichever of these they agree to:
14 more checks, with revenue measured from their own records.
Charged only when you run it. Asking the seller costs nothing. Pricing →
Nothing can be changed, moved or charged.
Each platform is granted or skipped on its own.
Our copy of the access is deleted when the scan finishes.
You get a report, not their logins or keys.
Ask the seller for it. Most marketplaces hide the domain until you are in conversation, and F(x) will not guess - scanning the wrong company is worse than scanning nothing.
The free scan reads what your own browser fetches when you visit, plus the public registry, DNS and certificate records. Nothing signs in, and nothing tries a password.
Published reference tables, cited beside the finding they priced. Each figure says whether it was measured on this site or taken from an industry average.
It reaches their site as one ordinary visit and nothing in it names you. They hear from you only if you send the access request, which is your decision to make from the report.
It is reported as a gap, never as a pass. The report lists every check and which of three things it did: ran clean, found something, or could not run.