Aytict Oy
An automated security assessment of a website you own or are authorized to test. It checks DDoS protection, SQL injection and exposed network ports, then produces a report you can download and act on.
This assessment sends real traffic to the address you enter: repeated requests, SQL injection probes and a port scan. Doing that to a system you do not own or have written permission to test is a criminal offence — in Finland under Rikoslaki 38:3–5 and 38:7a, in the EU under Directive 2013/40/EU, and in the United States under 18 U.S.C. 1030.
So before anything is tested, you have to prove you control the target by publishing a short verification token in your DNS or on your web server. It takes a minute, and the record of it is kept with your report as evidence the assessment was authorized.
Publish this token using either method below, then have us check it. The token is tied to your e-mail address and the domain, so it stays valid for future assessments — you only have to do this once.
Add this record at your DNS provider. It can take a few minutes to propagate.
TXTServe the token as plain text at this address:
Queued…
This usually takes a few minutes. You can leave this page open, or come back to the link below later.
The report contains details of exploitable weaknesses in live infrastructure. Treat it as confidential and store it securely. Download links expire after 30 days.
Want these findings fixed, or a deeper manual assessment? Contact aleksi.laurila@aytict.fi.
Identifies whether a CDN or scrubbing provider fronts the site, whether the origin server can be reached around it, and whether rate limiting engages.
Not a flood. A small, capped burst is used to observe behaviour — we never attempt to exhaust your capacity or take the site down.
Runs sqlmap against the URL to find parameters where input reaches a database query unsafely.
Detection only. No data is extracted, no shell or file access is attempted, and nothing is modified.
Scans the hostname and every IP behind it for common service ports, and flags databases, remote access and file sharing exposed to the internet.
A TCP connect scan with light version detection. No OS fingerprinting and no exploit scripts.
An automated assessment establishes a baseline. It does not cover business logic, authenticated areas or social engineering — for that, our manual penetration testing is the right tool.