One letter anyone understands without a security briefing. Scan yours free, then get the report that explains how to move it up.
Free, no account, no email. Reads only what your site broadcasts publicly.
Every scan exports a PDF dressed in your agency's colors, voice, and logo. Your client sees you — not us. Recommendations are copy-paste, not philosophy.
Data stored in France, VAT invoices, and a compliance narrative aimed at the FR/EU market rather than bolted on for it.
Weekly or daily scans across your whole portfolio. An email lands the moment a grade drops. You stay ahead of the phone call.
Paste a client domain and label it. Every site you maintain sits in one list, with its grade and the date it was last looked at.
~30 seconds per site
Passive modules run immediately — they read publicly broadcast data, exactly like a browser does. Active modules need a DNS TXT record or an HTML file first. Two minutes, and it persists.
~2 minutes · one-time
The scan runs as a background job, so you keep working. When it lands you get the grade, the issues ranked by priority, and fix snippets you can paste straight into a config.
~2 minutes end-to-end
Weekly or daily runs, each diffed against the last. You are emailed only when something new appears — an expiring certificate, a header removed, a grade that dropped. Silence means the portfolio is still clean.
runs in background
The report does not stop at the letter. Every finding carries the fix and what it is worth, so the conversation with your client is about work to be done rather than a score to be argued with.
Yes, provided you have a mandate — a maintenance contract, a signed audit agreement, or an explicit email from the client. For active-tier scans we enforce a technical ownership check on top of that contractual mandate.
In France. Supabase eu-west-3 (Paris), backed by AWS. Customer data never transits to non-EU regions during normal operation. Stripe handles billing from Ireland, transactional email goes through Resend in the EU.
You upload your logo and a brand colour in Settings. Every generated PDF renders with your identity — no Mythos Scan logo, no Mythos Scan footer, no mention of us anywhere on the page your client reads.
A clean report is as valuable as a long one. Your client pays you for the confidence that nothing changed, and you get the same white-label PDF with an all-clear summary — your retainer justified in one artifact.
Cancel anytime · −20% annual · VAT invoices
Enough to add one client site and hand them a report in your own colours. Scheduled monitoring is what the plans below add.
5 domains · 50 scans / month
25 domains · 500 scans / month
100 domains · 5,000 scans / month
Add a domain, run the scan, hand over a PDF with your logo on it. No install, no agent, no calendar invite.