Website security scan
Free passive OWASP ZAP security check for any site you own. Verify your domain, review risk-ranked findings, and optionally request a deep scan with a full report.
Step 1 — Add a DNS TXT record
Enter the site you want to scan. We'll give you a TXT record to prove you control the domain before any scan runs.
Step 2 — Verify DNS
After the TXT record is live, we'll look it up and confirm domain ownership.
Step 3 — Quick security scan
Domain ownership is confirmed. Run a passive-only OWASP ZAP scan.
Request a deep scan & report
One-time $100 — includes a thorough spider + active OWASP ZAP scan and a written report (PDF / Markdown).
You must verify your domain above first. Deep scans are only accepted for verified domains.
Complete Steps 1–2 (TXT record + Verify DNS), then return here to request a deep scan.
Free OWASP ZAP security scanning online
NetworkBolt's security scan uses OWASP ZAP to surface common web vulnerabilities and misconfigurations. The free quick scan is passive only — no active exploitation — and findings are grouped by High, Medium, Low, and Informational risk with suggested fixes.
Security scans for St. Catharines
Serving clients from St. Catharines and worldwide, we help businesses understand website security risk before attackers do. Start with the free scan, then upgrade to a deep scan if you need broader coverage and a shareable report.
How the security scan works
- Add a DNS TXT record to prove you own the domain
- Verify DNS, then run the free passive security scan
- Review findings and download PDF or Markdown reports
- Optionally pay for a deep spider + active scan with a detailed report