ScanTower
A website security checkup you can run without installing anything or touching your server — point it at your site's address and it comes back with a report card grading how exposed you are, from A+ to F.
🔗 Visit ScanTower
Description
ScanTower is an external website security scanner: it runs 30+ automated checks against a site from the outside, the same way a visitor or an attacker would see it, with no plugin or server access required. It covers WordPress-specific vulnerabilities, exposed API keys and hardcoded credentials (AWS, Google, Stripe, GitHub, SendGrid, and others), malware indicators, SSL/TLS configuration, DNS security, and even visual defacement by comparing full-page screenshots over time.
Scans use a real browser rather than a simple HTTP fetch, so JavaScript-rendered content gets checked too. Results include client-ready PDF reports with letter-grade scores, baseline comparison to flag what changed since the last scan, and alerts over email, Slack, Discord, or webhook. There's a free tier (1 site, 15 scans/month) and paid Pro/Agency tiers for managing more sites, plus a completely free, no-registration standalone exposed-secret scanner.
💬 Our review
The short version: for anyone who doesn't want to install a security plugin or grant server access just to get a health check, ScanTower is a reasonable, affordable outside-in scanner — genuinely useful for agencies juggling several client WordPress sites, less necessary if you already have a security plugin or dedicated monitoring stack.
Its free standalone secret scanner competes directly with tools like KeyLeak Detector or KeySentry for that specific job, but ScanTower's actual product is broader — the recurring, scheduled, graded website checkup with alerting, which those code-focused scanners don't do. The tradeoff for the paid tiers ($12.99-$99.99/month) is that it's an external black-box scanner: it sees what a visitor sees, so it won't catch internal misconfigurations a server-side or code-level scanner would.
💰 Pricing
📊 Global score
🤖 AI-enriched data
Gratuit : 1 site, 15 scans/mois. Pro : 12,99$/mois (20 sites, 500 scans). Agency : 99,99$/mois (200 sites, 2000 scans). Scanner de secrets autonome 100% gratuit sans inscription.
Pros
30+ vérifications automatisées, scan par navigateur réel avec captures d'écran
Rapports PDF prêts pour les clients avec note A+ à F
Scanner de secrets exposés 100% gratuit, sans inscription
Cons
Scanner externe en boîte noire — ne voit que ce qu'un visiteur voit
Tarifs payants au-delà du site unique gratuit
Ne remplace pas un scan côté serveur ou code