Know the Day Your Magento Checkout Changes.
A daily outside check for Magento stores: patch level, admin exposure and every script on your checkout. Nothing to install.
- Nothing to install
- Checked daily
- Alerts in plain words
Scan Your Store
We read only public pages. Nothing to install, and nothing on your store changes.
Built for: Magento Open Source stores and the agencies that look after them.
Now taking our first 10 storesMagento 2.4.6 Stopped Getting Security Patches on 11 August.
Card skimmers hide one line of code on the checkout page. A one-off scan won’t tell you when it appears. Most stores hear about it from their payment provider.
of stores were still exposed 6 weeks after the SessionReaper fix came out.
Source: VulertThere’s no paid extended support for Open Source. When a version leaves support, the fixes stop coming.
A new checkout script doesn’t announce itself. It sits there until someone looks, or the payment provider rings.
A Daily Outside Check, in Plain Words.
Your Store From the Outside, Every Day.
Version, last rebuild date, admin login and known issues, every day.
- Version and patch level, read from public files
- The date your files were last rebuilt, and the Adobe fixes since
- Whether your admin login answers to the whole internet
First seen 30 Oct, 02:14Email sent 06:02
Every Checkout Script, Against a Known-Good List.
Every script on your checkout against a known-good list, with an alert when one changes.
- Each script on the checkout, with its domain
- An email the day a script is added or changed
- You decide what goes on the known-good list
Monthly security report
example-store.com
October 2026
For your payment provider or PCI auditor
A Monthly Report for Your Payment Provider.
A dated PDF every month, for your payment provider or PCI auditor.
- Every daily check of the month, dated
- Checkout script changes and what was done about them
- Plain words on page one, the detail after
Everything You Get, Set Up for You.
We set up our first 10 customers by hand. Pick a plan and join them.
Pick a planFounding customers pay half for the first 12 months. Nothing is charged until it’s live for you. Cancel any time.
Frequently Asked Questions
Write to Tim. You get an answer from a person, usually the same day.
Do I need to install anything?
No. We read your store from the outside, the way a shopper’s browser does.
Is this a penetration test?
No, we only read public pages. We don’t log in, try passwords or attack anything.
Does it work with Hyvä and Adobe Commerce?
Yes. We read the same public pages, whatever the theme or edition.
What happens when you find something?
An email the same day, in plain words, with what to do.
What does it cost?
€49 a month per store. Agencies with 10 or more stores pay €29 a store. Founding stores pay half for the first 12 months.
Scan Your Store.
Type your domain and we check it from the outside. Nothing to install, no account needed.