Vaultedo Exposure Scan

See your website the way a scraper does.

One report for your site: what automated browsers, AI crawlers and cloners can take from it today, what that could cost you, and how each gap closes. Plain requests from our server, like a crawler: nothing is signed in to, submitted or changed.

Run my Exposure ScanSee a sample report

Sign in with your work email. One scan per website; companies on a paid plan can scan their own sites again.

SAMPLE REPORT ยท EXAMPLE FIGURES

We found 9 exposures on example.com

Vaultedo fixes 6 of them; 3 are settings on your side.
Automated browserNot stopped
AI crawlers that got the page4 of 6
Right-click, copy, saveOpen
Shown inside another siteAllowed
Source maps publishedNone
Keys in public codeNone

What the scan checks

Eight checks on your public site. Each finding in the report says what was measured, what someone could do with it, and the fix.

AI crawlers and scrapers

Your home page, asked for as GPTBot, ClaudeBot, PerplexityBot, CCBot, Bytespider and a plain script.

Content in other people's models

Automated browsers

Whether anything on the page notices a browser driven by a script.

Every page copied in bulk

Copying and DevTools

Right-click, select, copy, save, print, developer tools, view source.

Content and code lifted as is

Cloning and framing

Whether the page downloads file for file, and whether another site may show it in a frame.

Lookalike sites, stolen sign-ins

Readable code

Scripts shipped as written, with comments and names intact.

Your product rebuilt by others

Source maps

Map files that rebuild your original source, file by file. We tell your own code from library code.

The repository, handed over

API addresses and keys

Endpoints named in public code, and keys that look secret, always shown masked.

Data pulled without the page

Site settings

HTTPS enforcement, cookies, security headers, software versions on show.

Small gaps that help the rest

What is at stake on your site?

Switch on what your site has. This runs only in your browser and says nothing about your site until you scan it.

Switch on what applies
  • Each switch shows what an open site could cost you.
Measure it on my site

How it works

1Sign in

With your work email. Your company's own domain is the site you scan.

2Scan

About half a minute of plain requests from our server: your page, its scripts, its maps, its settings.

3Read, download, fix

The report stays in your console. Download it, print it to PDF, and close the gaps with Vaultedo.

The rules

One scan per websiteEvery company scans its own site once. A run that does not finish does not count.
Your own site onlyThe domain of your work email, or one you have verified. Nobody scans someone else's site here.
Yours to keepRead it on screen, download it as a page or as data, print it to PDF. Paid plans can scan again.

One tag closes most of what the scan finds.On governeto.com, which runs Vaultedo, automated Chromium, Firefox and WebKit read 0 characters, copies on other domains go blank, and every attempt is recorded with its address.

Run my Exposure Scan