The thread through your website
Sutros reads your whole site the way a careful visitor would, then hands you the thread: what's broken, what's risky, and what would make it better, all in plain words.
How the checkup works
Sutros looks around, decides what actually matters for your site, and checks it carefully. No fixing, no breaking, just a clear read.
We see what your website is built with and how old it is, the same way you'd notice a shop's paint is peeling.
Based on what we found, we decide what's worth a closer look, so we don't waste your time on things that don't matter.
We crawl your pages and run deep security checks: exposed files, leaked secrets, vulnerable libraries, weak encryption, and input handling, watching for anything broken or private that shouldn't be showing.
Recon & checks. A crawl plus scripted probes across TLS, security headers and CSP, CORS, cookies, exposed files (.env, .git, backups, keys), leaked secrets and source maps, vulnerable JS libraries, form and CSRF hygiene, and a conservative reflected-input (XSS surface) check. Reliable and safe, no model needed.
The brain. Reads recon output, decides which checks to run and in what order, and prioritizes by likely impact. Judgment, not raw execution.
The explorer. A browser pass that navigates flows like a curious customer would, catching breakage scripts miss. Read-only: no transactions, detection not exploitation.
The writer. Turns structured findings into a plain-language report with an A–F grade, real-world impact, and a simple fix for each issue.
Look out for your neighbors
The corner bakery running a five-year-old website deserves the same safety as a big company. Anyone can flag a local site that needs a hand.
Spot a neighborhood shop with a sketchy or broken website? Send them a friendly, no-jargon heads-up with a free checkup. They decide whether to run it.
We never scan without the owner's OK. This creates a friendly invite and a checkup link you can send them.
Ready to send
Hang tight. We're going through your whole site, top to bottom.
We can email this report to your web person, or connect you with a vetted local helper from the Sutros community.
Web people who help small businesses, listed by the Sutros community. Reach out directly, or send any of them your report link. Know your stuff? Add yourself below.
Free. Small businesses running Sutros can find you here.