Scan any domain.
Know your risks.
Enter a domain or IP address. Vigil checks open ports, SSL certificates, HTTP security headers, and exposed sensitive files. Instant results with prioritized remediation steps.
Try: google.com, github.com, or your own domain
Watches everything.
Reports what matters.
Vigil scans your web apps, APIs, and network perimeter. When it finds something, it tells you exactly what's wrong and how to fix it — ranked by actual exploitability, not theoretical risk scores.
What Vigil checks
Five automated security checks. Each one would take a security engineer hours. Vigil does them in seconds.
Port Scanning
Checks 21 common ports including databases (MySQL, PostgreSQL, MongoDB), remote access (SSH, RDP, VNC), and web servers. Flags dangerous services exposed to the internet.
SSL/TLS Analysis
Validates your SSL certificate — expiry dates, self-signed detection, TLS version, and cipher strength. Catches expired or misconfigured certificates before browsers warn your users.
HTTP Security Headers
Checks for HSTS, CSP, X-Frame-Options, and 8 other critical headers. Missing headers are the most common — and most fixable — web vulnerabilities.
DNS & Email Security
Verifies SPF, DMARC, and DNS configuration. Missing email authentication records let attackers send spoofed emails from your domain.
Sensitive File Detection
Probes for exposed .env files, .git directories, phpMyAdmin, server-status pages, and other common misconfigurations that leak credentials or internal info.
Prioritized Remediation
Every finding includes severity ranking and step-by-step fix instructions. Know exactly what to fix first and how to fix it — no security expertise required.
Vigil vs. the old way
| Manual Pen Test | Vigil | |
|---|---|---|
| Cost | $15K-$50K per engagement | Free |
| Speed | 2-4 weeks for report | Under 60 seconds |
| Signup | Contracts, NDAs, scoping calls | None. Just enter your domain. |
| Remediation | Your problem | Step-by-step fix for every finding |
| Coverage | Point-in-time snapshot | Scan anytime, as often as you want |
Security should be a given,
not a luxury
Every business deserves the same protection that Fortune 500 companies get. Vigil exists to make that real. Scan your first domain — it takes 30 seconds.