What an attacker finds on your site before you do?

Yes. The basic check is free, with no signup and no card — just your website address. You only enter an email if you want to unlock all findings and have the full report sent to you. A paid Pro tier with fix guides and site monitoring is still on the way.

No. The check is lightweight — over a few seconds we send on the order of a few dozen requests, less than a single ordinary visitor. We don't change or delete anything on your site, and we don't try to bypass anything. Your traffic and speed stay unaffected.

Yes. We only test what your site already serves to every visitor — the same headers, public files and server responses. We don't guess passwords, break past security, or overload the server. Just check sites you own or manage — that's fully your right; this tool isn't for snooping on others.

Nothing beyond your report. We inspect the site from the outside and store only the check results — the score and findings — so you can reopen the report via its link anytime. Even where we count, say, the number of publicly readable database records, we count only that number; we never read or store the data itself.

We use your email only to send your report and tips on fixing the findings. No spam, no selling to third parties, one-click unsubscribe. Giving your email is optional too — you'll see the basic findings without it.

The report has a random unique link and we deliberately keep it out of search engines — only the people you send the link to can see it. Because it describes specific weaknesses of your site, we recommend not sharing it publicly.

Every check comes from a real audit finding, not generic theory. An automated test occasionally hits an edge case — say you protect a form in a way we can't see from the outside — so for each finding we explain how we reached it and how to verify it yourself. When in doubt, get in touch.

Lighthouse mainly measures the speed and SEO of a single page. Reconvio combines over 150 checks across 6 areas — server and code security, leaked keys and credentials, DNS and email, law and GDPR, accessibility and visibility — and explains it all in plain language. Instead of a table of numbers you get concrete issues ranked by how much they could cost you.

No, and it doesn't try to. Reconvio is a fast outside-in look that surfaces the most common and most expensive mistakes in half a minute. A deep audit with penetration testing and access to your code and infrastructure is a different league — when you need one, Reconvio is a good first step and we'll point you further.

Yes. We check the site the way a visitor and a search engine see it, so it doesn't matter what it runs on — WordPress, Shopify, Webflow, a custom build, or a site made with AI. Some checks — like GDPR, cookie consent and consumer-law duties — apply to any store selling to EU customers, wherever you're based.

For each finding we explain what's wrong and why it puts you at risk. In the detailed report we add exactly what to do about it — often even what to paste into your own AI to fix it. For the harder ones we're preparing Pro with precise guides and site monitoring; if you need help right away, you can reach out directly.

Reconvio is built by ethical (white-hat) hacker Marek Křivan — he breaks into sites legally to help secure them before someone with bad intentions does. Every check comes from a real finding on a real site, not generic theory — mostly on sites built fast and with AI, where the same mistakes keep repeating.