Free website
security sweep.

A free website security sweep, with a clear report on what needs attention.

Free agreed patches when you choose 12 months of paid hosting. The sweep is free either way.

Know where you stand.

We review what your website exposes publicly, then explain the findings and the next steps. No exploit payloads or changes to your site during the sweep.

Software exposure: Publicly visible server, runtime, CMS, theme, and plugin versions checked for known security issues, where those versions can be identified.
HTTPS & headers: Certificate and HTTPS configuration, browser security headers, and obvious configuration gaps.
Public access: Exposed administration pages, directory listings, and publicly reachable files that deserve a closer look.
A useful report: Findings prioritized by risk, the limits of what we could verify, and a practical patching plan. A version match is a warning, not proof of exploitability.

An external sweep is a starting point. It cannot establish that a site is free of vulnerabilities or replace a full penetration test.

Patching included.

With a 12-month paid hosting agreement.

If the sweep finds issues, we’ll agree on a patching scope. Choose a 12-month SecuritySweep hosting agreement and we’ll carry out those patches at no extra charge.

That can include supported software upgrades, CMS and plugin updates, and configuration hardening. We confirm compatibility, access, backups, and any migration work before making changes.

You’ll receive the hosting price and patching scope in writing before you commit. Rebuilds, replacement software licenses, and work outside that scope are quoted separately. Requesting a sweep does not sign you up for hosting.

Start with the free sweep

Professional experience.

Lars van der Zande
Independent developer
Employed at IBM

This service is provided independently by Inkwell Finance, Inc. through SecuritySweep. IBM is not a provider, sponsor, or endorser of this offer.

View professional background ↗

Before we start.

Is the sweep really free?

Yes. The external sweep and findings report are free, with no hosting commitment. Free patching is conditional on a signed 12-month paid hosting agreement and an agreed remediation scope.

Will the review affect my website?

The initial sweep uses non-intrusive checks of publicly accessible information. We confirm your authority and the target domain in writing before starting. No exploitation, password guessing, load testing, authenticated access, or changes to your website are included.

What if my site is already compromised?

Tell us in the request. We’ll discuss containment and investigation before doing anything. Incident response, malware removal, and recovery require a separate agreed scope; they are not automatically included in the free patching offer.

What does hosting cost?

We quote hosting based on your website’s requirements before you sign anything. The commitment is 12 months of paid hosting. We’ll explain billing, migration, renewal, and cancellation terms in the hosting agreement.

Scope & data use

We use your contact details, website address, and notes to handle this request and deliver findings. Requests are stored in our Cloudflare account. Records older than 90 days are removed when new requests are processed; any later service agreement will describe its own record handling. We do not publish your findings or use this form to subscribe you to marketing.

The request is permission to contact you, not permission to start testing. Before the sweep, we confirm your authority, target, and non-intrusive scope in writing. We do not test third-party infrastructure without the necessary permission. Patching requires a separate approved scope and hosting agreement.

For questions or to request deletion, contact lmvdzande@inkwell.finance or reply to our scheduling email. Scope version: October 22, 2026.