We look, we explain, we keep watch.
What we check on your website, how it works, and the rules we keep to while we do it.
What we look out for
39 checks, grouped by what could go wrong for your business. We find the problems and explain the fix.
Someone pretending to be your business by email
We check whether other people can send email that looks like it comes from you.
5 checks. Starts in Free, complete in Starter.
Visitors' data being read or changed on the way
We check that what visitors type and see travels encrypted, and warn you where it doesn't.
8 checks. Starts in Free, complete in Starter.
Your site being copied into a fake page or hijacked
We check for gaps that let your pages be shown inside a fake one, or let outside code change them.
7 checks. Starts in Free, complete in Business.
Private files left open to anyone
We check for backups, settings files and admin pages that anyone on the internet can open.
3 checks. Starts in Free, complete in Business.
Losing your domain or website by accident
We warn you before your domain or certificate runs out, and check that your site is up.
8 checks. Starts in Free, complete in Starter.
Login sessions being stolen
We check whether your site's login cookies are set in a way that makes them easy to take.
3 checks. In Starter and up.
Fake certificates or forgotten subdomains
We check the public records for certificates you didn't ask for and subdomains you forgot about.
3 checks. Starts in Starter, complete in Business.
Being flagged as dangerous by browsers
We check whether your domain is on the list browsers use to show visitors a red warning.
1 check. In Business.
Nobody being able to warn you
We check that someone who finds a problem with your site can see how to tell you.
1 check. In Business.
How it works
We check
Enter your address and confirm it's yours. Safe, read-only checks run in under a minute.
You understand
You get a score out of 100 and the most serious problems explained in plain words, with steps to fix them.
You stay covered
Save the report to your account and ask us if you get stuck. Daily monitoring with email alerts is opening soon.
Hear about it before your customers do.
Websites change without anyone noticing: a hosting update drops a security setting, a certificate runs out. With monitoring, you add a website you own or have the right to have tested. Then we check it every day and send one clear email when something important changes: a new serious problem, a falling score, your site being down, or a certificate or domain about to run out. Harmless changes stay quiet, and every email has a link to switch alerts off.
Daily monitoring arrives with the paid plans
Security change detected
How we work
A security service should be safe to point at your own website.
Read-only, always
We look at what any visitor's browser can see: pages, headers and public DNS records. No password guessing, no exploits, nothing that could harm your site.
Only websites you control
You confirm you own the site before every scan. The scanner also refuses private and internal addresses, so it can't be turned against anyone's network.
We don't keep what we find
If a sensitive file is exposed, we record that it exists, never what's inside it.
An honest score
Royals Security is an assessment, not a guarantee. A high score means we didn't find common problems, not that a site can't be attacked.
Start with a free check.
It takes under a minute, and nothing on your site is changed.