A clear view of your website's security, from passive signals to deeper checks.
Public data only. Runs on any domain you add.
Gentle requests to your site. Verified domains only.
Ports, known CVEs and probes. Verified domains only.
Each tier unlocks deeper modules. Active and deep modules run only against verified-owned domains. NIS2 has applied since 18 October 2024 — essential and important entities in the EU must take technical measures to manage cyber risk (Art. 21). Start with what the outside world can see.
Every finding carries the controls it relates to, so the report speaks the language your auditor, board and customers expect.
TCSR is automated — it covers the automatable technical-testing subset of these guides. Manual penetration testing and business-logic review are out of scope. Logos and standard names are referenced to indicate methodological alignment only and do not imply certification, accreditation, endorsement, or affiliation.
Scan your domain free and get a clear report.