Thanks, I'll have to fix that. Seems my scan queue has grown out of control since this morning, so I apologize the queue wait time is running at about 30 minutes now...
Thanks for the feedback! I have been considering alternate tactics, such as showing low/medium risk issues but not high risk, or just selling the free scan as a high level scan which doesn't complete any in depth testing.
Yes, I use skipfish for some tests, though I customized parts of it (it has an amazing web crawler). I also use proprietary scan technology, and plan to add a few more open source tools into the mix (such as port/service and virus scanning) in the not so distant future to create one combined risk/vulnerability report.
interesting file is typically a text file, unsecured htaccess file, or sometimes 500 error messages. If you tell me your site, I will check for you.
target market is small business, medium size business, or individual site owners - mostly those who don't maintain a full time IT security staff but want some visibility into their site risks. Eventually I may add PCI checks, but that is a huge compliance/paper cost which is tough for a one man shop to keep up with.
I have to admit I didn't test with mobile devices for launch, trying to get it out the door. What phone are you using? iPhone/Android/Windows? I'll work on the expand/collapse JavaScript for phones
Ouch.. had to bounce Apache, but not sure what caused that... other sites on the same host have had a few thousand hits in a couple hours. Maybe more traffic than expected this morning
It shouldn't... I have scanned several hundred sites through Beta without any impact. Some blogs which are not well configured slow down (working to fix)
Thanks for responding. There is a free scan, which shows almost everything you would get if you bought, minus the actionable information. More suggestions on how to sell/show information it are very welcome!
note to self, add a queue list to scan page..