When I launched WebAudit earlier this year as a free SecurityHeaders.com
replacement, it was a simple scanner — paste a URL, get a grade.
Since then I've shipped a lot. Here's what's new.
Agency Tier — Monitor Up to 25 Domains Automatically
The most requested feature from freelancers and web agencies. Instead of
manually scanning client sites every week, Agency tier does it for you.
- Add up to 25 domains to your dashboard
- Choose weekly or monthly scan schedule
- PDF reports emailed automatically on your chosen day
- Per-domain toggle — only receive PDFs for the domains you care about
- 500 scans/month
Priced at ₹999/month (India) or $28/month internationally. No per-domain
fees, no seat limits.
Compliance Report — One-Time GDPR/PCI/HIPAA Gap Analysis
Not everyone needs a monthly subscription. For one-off audits or client
deliverables, the Compliance Report is a ₹249 (~$3) one-time purchase.
It maps your site's current security posture against GDPR, PCI-DSS, and
HIPAA requirements — showing which controls pass, which fail, and what to
fix. Delivered as a PDF instantly.
Score Simulator — See Your Grade Before You Fix Anything
One of the most useful additions for developers. Before touching your
server config, you can toggle individual fixes in the Score Simulator and
see exactly how much each one moves your score.
Adding a Content-Security-Policy worth +12 points? HSTS worth +8? You'll
know before writing a single line of config.
World Security Index — Weekly Scan of 100 Popular Websites
webaudit.in now runs a weekly scan of 100 popular websites across tech,
media, finance, and government — and publishes the results publicly.
Current standings: 56 scored F, 18 scored D, only 3 scored A.
Full live results: webaudit.in/world-security-index
What's Still Free
- Unlimited scans (no account needed)
- Full grade breakdown across HTTP headers, TLS, DNS, cookies, CORS
- README badges
- Score Simulator
- World Security Index

Top comments (0)