TLS
Encryption
Certificate trust and expiry, TLS version, and whether plain HTTP moves visitors to HTTPS.
Paste a domain or a contract. REDVISOR grades what an attacker can already see, and tells you how to fix it.
The scan engine. It reads what your site and token already show the public, then grades it.
Encryption, browser protection, email and DNS, software, exposure, contract and launch.
It never logs in, submits forms or sends exploits, so any public domain can be read safely.
It reads Pons launches on Robinhood Chain: owner controls, deployer holdings and creator tax.
A missing header on a Web3 site can become a wallet drainer. Every finding comes with its fix.
A good grade is not an audit. It shows what is exposed in public, right now.
Every scan reads public information and returns a grade, each finding, and the fix for anything that failed.
TLS
Certificate trust and expiry, TLS version, and whether plain HTTP moves visitors to HTTPS.
WEB
The headers that stop injected scripts and clickjacking, the attacks behind most wallet drainers.
DNS
Who can send mail or get a certificate in your name.
CVE
Exposed versions matched to published advisories, plus subdomains in certificate logs and the Quad9 blocklist.
PONS
Owner controls, deployer holdings, creator tax, graduation, and supply at the dead address.
Six steps, all from the outside. Nothing is changed on your site, and nothing is signed.
Paste a domain or a 0x contract.
Fetch the page, headers, DNS and chain data.
Compare each result against the rules.
Look up exposed versions in public advisories.
Score every area from A to F.
Show what failed and how to repair it.
Every scan and every agent reads public data only.
Verified owners get agents that keep watching. They prepare the work. Nothing touches your server until you apply it.
RunningRescans your verified sites every six hours and reports what changed: new failures, certificate expiry, blocklists and software versions.
RunningRechecks the software on your sites when CISA confirms a newly exploited vulnerability, and alerts if your address appears on a botnet or hijack list.
On demandDrafts firewall rules for a site from its latest scan. You review them and apply them yourself.
On demandWrites the fix for each finding as steps and config for the stack the scan detected.
ComingWill watch the contracts and wallets tied to your project. It is still in development.
Roadmap: Scan live · Monitor live · Defend and patch next · Web3 shield after that.
● Open the dashboardEnter a public domain or a contract on Robinhood Chain. The result arrives in seconds.