AuditPulse
AuditPulse is a free website security scanner that helps site owners discover common vulnerabilities without installing any agent or configuring infrastructure. A full audit runs 18 non-destructive checks covering security response headers, TLS configuration, cookie attributes, CORS, exposed secrets in JavaScript bundles, exposed backups, outdated libraries, DNS email security, and other externally observable attack surface. It crawls pages linked from the site's homepage rather than only testing the root URL, and produces a severity-ranked, plain-English report that explains the real-world impact and step-by-step fix for each finding. AuditPulse is designed to be understood by non-security experts while still being useful to developers. Each finding leads with what could actually go wrong, and the technical detail and exact remediation are one click away. Users verify ownership of a domain by adding a DNS record or uploading a file before a full audit is run, which ensures the service is only pointed at sites the user owns or is authorized to test. Free accounts support up to ten sites, unlimited on-demand audits, and automatic weekly re-audits. For added trust and reporting, every verified site can display an embeddable trust badge and receive a certificate-style PDF after each audit. Where possible, AuditPulse can create GitHub pull requests that implement fixes directly. The service is entirely passive and non-destructive, does not exploit any findings, and is free with no card or trial timer.
- Category
- Advertising
- Pricing
- Free
Problem solved
Website owners often lack the time or security expertise to detect misconfigurations, exposed secrets, outdated libraries, and weak TLS or DNS settings. AuditPulse automates 18 non-intrusive security checks, translates results into plain-English prioritized findings with actionable fixes, and automatically re-audits weekly, making continuous security monitoring approachable and free for small sites.
Use cases
- Pre-launch security review of a new website
- Continuous weekly vulnerability monitoring for up to 10 owned sites
- Sharing an interactive security audit report with a client or teammate
- Embedding a live security audit badge on a website
- Sending a certificate-style PDF security report to stakeholders
- Creating GitHub pull requests that fix common security issues
- Detecting exposed secrets and backups in client-side code
Audience
- Developers
- Business Users
- Product Managers
- Startups
- Enterprise
Pros
- Free with no trial timer or credit card
- 18 passive checks, including headers, TLS, cookies, CORS, JS secrets, and DNS email security
- Crawls linked pages from the site, not just the homepage
- Findings explained in plain English with severity ranking and step-by-step fixes
- Includes automatic weekly re-audits, trust badge, PDF certificate, and fix pull requests
Cons
- Full audits require domain ownership proof; no authorized third-party scans by URL alone
- Free tier is capped at 10 sites
- Passive checks only, so it will not detect vulnerabilities that require active exploitation testing
- Requires an account for full audits and reports; only a limited single-pass scan is available without sign-up
- Limited to the configured checks and crawlable pages, so deeper application-layer vulnerabilities may be out of scope
Official website: https://brokehealth.com/
Canonical LambdaBase page: https://www.lambdabase.com/tools/auditpulse