Short answers about what we measure, how we do it, how we can help, and the rights you have over the barometer and our scanner.
Every check produces three scores out of 100: compliance (visible configuration and good practices), vulnerability (known weaknesses detectable from the outside) and speed (perceived performance). We always measure from the outside, the way any visitor would. See how we test.
No. By default we read only what a visitor already sees: the home page, the response headers, the TLS certificate and the public DNS records. We never log in, never send a password or any attack payload, and never change anything.
A deeper, « borderline » check — sensitive files, hidden paths, administration ports — runs only for an owner who has proven the domain is theirs and has explicitly authorised it. More about our scanner.
No. The robot changes nothing and writes nothing, it respects rate limits and backs off if your server asks it to. It identifies itself as TopSecuredScanner and comes from recognisable addresses whose reverse DNS ends in .top-secured.com.
Yes — that is what we do. A detailed report tells you exactly what to fix (our reports), our experts can fix it for you (expert services), and we can keep watch over your site over time (monitoring). You are never obliged to buy anything to know where you stand.
We measure a large panel of websites and publish aggregated statistics with an honour roll. Only good results are named: a weakness is never shown next to a name. Measurement runs continuously and we publish a fresh « snapshot » every week. Read the method.
Use the join the panel form. You accept that your site is measured from the outside and that aggregated results may be published — your organisation may be named for a good result, never for a weakness. You can leave at any time.
You can ask to be removed; for a removal by name we check that you control the domain (a DNS TXT record). To dispute a score, use the contest a result form and we look again.
Tell us with the form on the scanner page: it covers a domain, an IP address or a whole network, and we apply it within 72 hours. You can also block TopSecuredScanner yourself in your robots.txt or at your firewall — we fully respect it.