Catch what breaks on your client sites
before the email arrives.

Security and uptime monitoring for every client site you manage.
One dashboard, plain-English fixes.

24/7
Monitoring
15.7K+
Sites scanned
<5s
Scan time
Free
First site, forever

Who uses Guardr?

Web Agencies
Stop doing manual health checks on 20 client sites. Guardr monitors all of them and surfaces issues before a client emails you about downtime or a failing SSL cert.
Freelance Developers
When a client asks 'does my site have security issues?', you have a real answer - headers, SSL, exposed files, uptime. Guardr makes that a line item on your retainer, not a rabbit hole.
Solo Developers
You built something worth protecting. Guardr runs the security and uptime checks you would otherwise forget - and tells you exactly what to fix when something breaks.
See how it works

How it works

Get your security score in 3 simple steps

1

Enter your domain

Just type your website URL. No signup, no installation, no code changes required.

2

We scan everything that matters

SSL, headers, DNS, exposed files, JS secrets, cookies - every attack surface a real attacker would check. Results in seconds.

3

Fix it once. Never worry again.

See your A–F grade with plain-English fixes for every issue. Sign up and we will alert you the moment anything changes.

We check it all.

So you do not have to.

Set it up once. We will guard it - so you can focus on your work, not your worries.

Your site shows a browser security warning

An expired or misconfigured certificate causes browsers to block visitors entirely - showing a full-page warning before they can reach your site.

Visitors see content you never wrote

Without the right protections, outsiders can modify what visitors see on your site - without touching your code.

Visitors land on a fake copy of your site

A compromised domain can silently redirect your traffic to a lookalike page you do not control.

Private files are open to anyone online

Config files, credentials and admin pages accidentally left public are trivial for attackers to find.

A user's account gets taken over

Poorly configured login sessions can be stolen - especially when users are on public WiFi or shared networks.

API keys are leaking from your JavaScript bundles

OpenAI, Stripe, AWS and Anthropic keys embedded in client-side code are publicly readable. Guardr scans your live bundles and flags them before attackers do.

Know your security score, always

Continuous security scans. Uptime monitoring. Clear remediation steps.

Always Watching

We check your site around the clock. Downtime is confirmed from 3 global regions before we alert you, so a security gap or an outage reaches you first, without false alarms.

Clear Fixes

Not just problems - solutions. Step-by-step guides to fix every issue.

Never Miss an Issue

Problems get flagged instantly. You decide how and when to be notified.

Monitor one site free. Add clients as you land them.

Guardr scales with your roster. Start on the free plan and pay $3.00 per site per month as your client list grows - without paying for sites you do not have yet.

Free for one site. No credit card required.

Free

One site

$0
Limits
  • • 1 website
  • • Scan every 6 hours
  • • 1-minute uptime checks
  • • 90-day history
Features
View features
Start Free

All sites

Every site you manage

$3.00 per site per month
Limits
  • • As many websites as you pay for
  • • Scan every 6 hours
  • • 1-minute uptime checks
  • • 90-day history
Features

Everything in Free, plus:

View features
Get Started

Frequently asked questions

Why do I need continuous monitoring?

Security configs break silently - a missing header, HSTS gets disabled, an accidentally exposed .env file. You will not notice until customers complain or Google flags your site. Guardr catches these gaps the moment they appear.

Does downtime really matter that much?

Even a few minutes of downtime during peak hours can cost e-commerce sites thousands in lost sales and damage customer trust. Guardr monitors uptime around the clock and confirms an outage from 3 independent global regions before raising it - so when we alert you, it is confirmed, not a false alarm.

What exactly do you scan?

TLS/SSL settings (HTTPS, HSTS, redirects, certificate expiry), security headers (CSP, X-Frame-Options, Referrer-Policy), DNS security (DNSSEC, CAA records), exposed files (.git, .env, phpinfo), cookie security and client-side JavaScript bundles scanned for exposed API keys (OpenAI, Anthropic, Stripe, AWS, Google AI, Supabase). All checks are external - we only see what attackers see.

Is this a vulnerability scanner?

No - and that is intentional. Guardr monitors your public-facing configuration and uptime, your first line of defense. We do not do penetration testing or code analysis, but we catch the misconfigs that make attacks easier.

How is this different from free tools like SecurityHeaders.com?

Free tools give you a snapshot. Guardr watches continuously, alerts you when something changes, tracks your score over time and tells you exactly how to fix each issue. Plus uptime monitoring - one dashboard for everything.

Do I need to install anything?

No. Guardr scans externally - no agents, no code changes, no server access. Enter your domain and we handle the rest.

I am a developer managing my own sites - is this for me?

Yes. You ship fast and move on to the next thing. Guardr watches what you have shipped - if a header breaks, a file gets exposed or your site goes down, you will know immediately. Fix it once, then forget about it.

I am a freelancer or agency managing client sites - how does this help?

You cannot manually check every client site every day. Guardr does it for you. Monitor all your sites from one dashboard, get alerted when something breaks and send branded reports that show clients you are keeping them secure. It builds trust and justifies your retainer.

Start with your own site. Add clients from there.

Free for one site, with no credit card required. Add clients anytime at $3.00 per site per month.

Start Your Free Scan