Security & Responsible Testing
WebsiteVigil is a monitoring and assessment platform, not an offensive testing tool. Our scanning behaviour is deliberately conservative.
Passive by default
Public scans observe only what a normal visitor, browser or search engine can see: HTTP responses, headers, certificates, robots directives, sitemaps and rendered public pages. We do not attempt exploitation, authentication bypass, injection, brute force or denial of service.
Verified authority
Deeper assessment is only enabled once domain ownership or authority is verified. Crawl rate and volume are limited to avoid burdening the target website.
Responsible disclosure
If you believe you have found a vulnerability in WebsiteVigil, contact us through the support centre before disclosing publicly. We will acknowledge, investigate and respond.
Check your website free
Get your WebsiteVigil Score™ and see what needs attention across all ten vigilance areas.