Website Guardian runs 28 checks across uptime, security, domain, and SEO — and tells you first, with exactly how to fix it. No plugin, no login, no access to your site.
Results in seconds. No signup, no credit card.
Then monitor free, forever — 1 site, all 28 checks — or from $3/mo for 5 sites.
Health score
Grade AChecked 2 minutes ago
DMARC record missing
Fix: add the TXT record we generate to your DNS
Plenty of "site management" tools need a plugin installed, an admin login, or server credentials before they can watch anything. Website Guardian never does — every one of its 28 checks works from the outside, the same way a visitor or a search engine sees your site.
Passive only — we never touch your server
Checks run on your schedule, down to 5 minutes
Every alert includes a fix, not just a diagnosis
Instant Telegram alerts, plus the in-app bell
Just the domain — nothing to install, no credentials to hand over. Every core check turns on automatically; a couple of heavier ones (like Lighthouse) are opt-in.
Uptime & performance, security & malware, domain & email, SEO & search — checked from the outside, same as any real visitor, browser, or DNS resolver would see it.
In-app and Telegram, with plain-language explanations — for DMARC, we hand you the exact DNS record to paste in.
Every check is passive and read-only — we look at your site the way a browser, a search engine, or a DNS resolver would.
More checks bundled into one plan than a single-purpose monitoring tool covers — priced lower per site, too.
Replaces a dedicated uptime monitor + a page-speed checker
Uptime
HTTP checks down to every 5 minutes, with response time tracked over time.
SSL certificate
Alerted 14 days before expiry, not the morning browsers start warning visitors.
Core Web Vitals
Real-user LCP/CLS/INP field data from Chrome, no manual setup needed.
Lighthouse audits
Full performance/SEO/accessibility scoring on demand, without slowing down routine checks.
Replaces a malware scanner + a security-header checker + a port scanner
Blacklist / malware
Google Safe Browsing status, before "Dangerous site" shows to every visitor.
Security headers
CSP, HSTS, X-Frame-Options and more — the headers most sites forget to set.
Exposed files
Catches public .env, .git, and backup files before someone else finds them.
Mixed content
Finds insecure http:// resources on your https pages that browsers block or flag.
Certificate Transparency
Alerts when a new SSL certificate is issued for your domain you didn't expect.
Content defacement
Flags a sudden, drastic homepage change — an early signal of compromise.
Vulnerable plugins
Detects CMS/plugin versions and cross-references public CVE databases.
Open ports
Flags unexpected open ports on your server — a common early foothold for attackers.
Cookie security
Flags cookies missing the Secure, HttpOnly, or SameSite attribute.
Third-party scripts
Alerts when a new external script appears on your pages — a supply-chain risk.
Subdomain takeover
Finds subdomains pointing to a deprovisioned cloud resource an attacker could claim.
Replaces a domain-expiry tracker + a DMARC checker
Domain expiry
WHOIS renewal reminders — domains lapse more often than you'd think.
DMARC / SPF
Catches missing email spoofing protection, with the exact DNS record to paste in.
DNS ownership
Alerts the moment your nameservers or registrar change — the earliest sign of a hijack.
Typosquat domains
Finds newly-registered look-alike domains before they're used to phish customers.
Replaces a Search Console dashboard + a rank tracker + an SEO audit tool
Index coverage
Catches when Google can no longer index your homepage.
Search traffic
Flags a sudden week-over-week drop in Google search clicks.
Keyword tracking
Watch your own list of terms for sudden ranking or visibility changes.
On-page SEO
Title/meta length, H1 count, missing alt text, and canonical tag checks.
Structured data
Validates schema.org JSON-LD — syntax errors and missing required fields.
Sitemap & robots.txt
Flags a broken sitemap or a robots.txt change that blocks your whole site.
Redirect chains
Detects redirect loops and chains longer than 3 hops.
Content decay
Flags pages whose search position or clicks have dropped over the last month.
Broken links
Crawls your newest sitemap pages daily for broken internal/outbound links.
Every check works the same way an outside visitor or DNS resolver would see your site.
No plugin. No FTP. No WordPress admin user. No DNS changes. No server agent — nothing installed on your site that could ever break because of us.
Zero-touch by design
We never ask for hosting, CMS, or server credentials — nothing to revoke if you ever leave.
We never modify your site
Purely observational — no auto-fixes, no code pushed, no risk of us breaking something ourselves.
Checked on a schedule, not once
Recurring checks avoid false alarms from a single dropped packet — an issue has to actually persist to alert you.
Auto-resolves when fixed
An alert closes itself the moment the next check confirms the issue is gone — no manual cleanup.
Real fixes, not jargon
DMARC alerts come with the exact record to paste into your DNS provider — not a link to go figure it out yourself.
You choose how loud it is
Critical issues can hit Telegram instantly; lower-priority findings stay in the in-app bell so you're not spammed.
Every plan runs the same checks — plans differ by how many sites you can monitor at once.
Free plan covers 1 site, forever. No credit card required.
Start monitoring free