Lasa.in Book a Call

How it works

Public data only.
Nothing that touches your systems.

The single most important thing to know: our review never scans, probes, or tests your website. Here's precisely how we work — and the hard lines we never cross.

Lane 1

We query public databases

We read information that other services have already collected and published. We never touch your systems at all — we're just looking up what's on public record.

Published vulnerability feeds (NVD / CVE)
Internet-wide scan databases we only read from
Certificate transparency logs
Public DNS records (including email SPF/DKIM/DMARC)
Domain registration (WHOIS)
Known public breach datasets
Public technology-fingerprint datasets
Lane 2

We read what your site already shows everyone

Exactly what any visitor's browser sees when it loads your homepage — nothing crafted, nothing repeated, nothing hidden. A single ordinary visit.

Public HTTP response headers
Your TLS certificate (as any browser reads it)
Files you publish to be read: robots.txt, security.txt, sitemap.xml

What we never do without written permission

Any of the following would mean actively testing your systems. We do not do them unless you have signed a scope-of-work that authorises it — because doing so without permission is both wrong and illegal.

Port-scanning your servers
Sending vulnerability probes (injection, XSS, etc.)
Brute-forcing directories or subdomains
Requesting known-vulnerable paths to confirm exploitability
Any login or password-guessing attempt
Deep automated crawling of your application

The process, end to end

01

Gather

We collect the public signals from the sources above for your domain.

02

Verify & rank

We confirm each finding and rank it by real-world severity — dropping noise so you only see what matters.

03

Report

You get a plain-English summary first, and a full report with fixes if you want the depth.

04

Fix (only if you want)

Any hands-on or active testing happens only after you sign a scope-of-work authorising it.

Ready to see what's public about you?

Start with a free summary. No systems touched, no obligation.

Request your free summary →