Product · Security product
Sentinel
A free website security toolkit — paste a domain, get a plain-English score, risk level, and a list of what to fix.
01
Overview
Sentinel is a live product: website security scan, subdomain finder, and fake-link checker. No account required. The point is a report a non-specialist can actually use.
02
The challenge
Most scanners dump raw findings. Operators need a score, a risk level, and a to-do list. The product had to be free to start, honest about what it checks, and fast enough to run in a browser tab.
03
Our approach
Lead with the job: enter a domain, scan, get a report. Three tools, ten checks on a full scan, sample report on the marketing surface so the outcome is visible before anyone types a URL.
04
Design direction
Dark product UI, high-contrast score, plain language instead of CVSS theatre. The marketing page and the scanner should feel like the same system.
05
Development
A React frontend with a FastAPI scanning backend. Live scan progress, structured findings, and separate tools for subdomains and redirect checks — shipped as a real product, not a brochure.
06
Performance
The wait is the scan, not the JavaScript. The interface stays responsive while work happens on the server, with a report that remains readable on mobile.
07
Security
A scanner is an attack-adjacent tool. Input is treated as untrusted, the surface is kept small, and the product explains checks instead of hiding them behind a paywall. We don’t claim it replaces a full engagement.
08
Final product
Live at the Sentinel URL: free scan, subdomain finder, fake-link checker — score 0–100, risk level, next steps.
09
Results
Shipped as a live product. No fabricated user counts. The work is the tool.
