Free · one URL in
Send me one storefront URL. I hand back the three things a scanner hits first: the request, the status it returned, the cause, and the smallest fix.
Send it to [email protected]. The URL is all I need.
A scan is the honest first step. If it turns up nothing, you have lost nothing and I have lost an hour. If it turns up the thing you cannot see from inside your own site, we both know what the next piece of work is. I would rather show you one real hit than sell you a package.
The last first hit I wrote up was on my own site, before I fixed it: every missing path answered 200 with the homepage. To any scanner, the whole site looked like it existed. That is the shape I write yours in — the request, the status, the cause, the fix.
The full worked example, and what it looked like before and after →
You do not need me to run the first line. You need a terminal, or a browser.
With a terminal (macOS: open Terminal; Windows: open PowerShell). Paste these three lines, one at a time, swapping in your own domain:
curl -sI https://yourstore.com/ | head -1
curl -sI https://yourstore.com/does-not-exist | head -1
curl -sI https://yourstore.com/.env | head -1The first should say 200. The other two should say 404. If the last two say 200, a scanner is being told your site is bigger than it is, exactly as mine was.
With a browser (no terminal). Open your store, press F12 or right-click and choose Inspect, and click the Network tab. Reload the page. Now type a nonsense path into the address bar, like yourstore.com/does-not-exist. Watch the Network tab: the top request's Status column should read 404. If it reads 200, the same problem is there.
That is the whole trick. If the second line surprises you, send me the URL and I will write up the cause and the smallest fix, free.