Know when your website needs attention
before your customers do.
VigiLayer scans your site, finds the problems, and explains each one the way a person would, not the way a security tool would.
- Scans your certificates, security headers, DNS, email records and uptime
- Translates every finding into plain English, with the exact fix
- Emails you the moment something changes, day or night
“We're too small to be a target.” That's not how this works anymore.
Attacks are automated. Software crawls the entire internet looking for the same handful of weaknesses, and it does not check how big you are first.
of all web traffic is now bots, and roughly 37% of it is malicious. Your site is being probed whether or not anyone has heard of you.
Imperva, 2025 Bad Bot Reportdays is how long a website compromise typically goes unnoticed by its owner. By the time something looks wrong on screen, it has been wrong for months.
Industry incident-response averages, 2026of WordPress vulnerabilities come from plugins and themes, not WordPress itself. Every plugin you installed and forgot is a door someone else maintains.
Patchstack vulnerability datamore confirmed breaches hit small and mid-sized businesses than large organisations. Small is not the same as safe.
Verizon Data Breach Investigations Report, 2025So the question isn't whether something will go wrong with your website. It's whether you'll find out from a dashboard, or from a customer who couldn't check out.
Certificate renewals just doubled in frequency
The CA/Browser Forum voted in 2025 to shorten how long certificates stay valid. Since 15 March 2026 the maximum is 200 days, down from 398. It halves again to 100 days in March 2027, and reaches 47 days by 2029.
If renewing was a once-a-year thing you vaguely remember doing, it is about to happen three or four times a year. Every one of those is a chance to forget. Forgetting looks like a browser warning on your checkout page.
CA/Browser Forum Ballot SC-081v3What VigiLayer watches
Every check is passive. Nothing here touches your site's data, slows it down, or asks you to take anything offline.
Certificates
Whether it is valid and trusted by browsers, and the expiry date nobody wrote down anywhere.
Security headers
The browser-level protections most sites are missing without knowing.
Uptime and speed
Checked every five minutes. We email you when your site stops answering, and again when it comes back.
Domain and DNS
Misconfigurations, plus the domain renewal date that has ended businesses.
Email security
SPF, DKIM and DMARC, so nobody can email your suppliers pretending to be you.
ReputationComing soon
Malware flags and blacklist warnings. Not built yet, so today VigiLayer will not tell you if your site has been flagged.
Four steps, then you can stop thinking about it
Setup takes about five minutes, most of which is waiting for DNS. After that VigiLayer runs on its own and only interrupts you when something has actually changed.
Add the website you look after
Type the domain. That is the whole step. No plugin to install, no code to paste into your theme, nothing that can break a site already working fine.
status awaiting verification
Prove the site is yours
One TXT record to paste into your DNS settings. This is the part that keeps us honest: no deeper checks run on any domain until its owner proves control. We ask two independent DNS providers and only accept it when both agree.
value vigilayer-verification=…
check both resolvers agree
Read your score, in plain English
Not a wall of raw output. Each finding says what is wrong, how serious it is, and the specific thing to change. "Missing HSTS header" becomes a sentence about someone on public wifi being sent to a fake copy of your site.
issue cert expires in 6 days
fix renew in your host panel
Get told before your customers notice
VigiLayer rechecks on a schedule and emails you when something changes: a certificate nearing expiry, a header that vanished in last night's update, a site that stopped answering at 3am on a Sunday. The alert is the product. Everything else is how we know when to send it.
03:11 site unreachable
03:12 email sent to you
What an alert actually looks like
Short, in plain English, and only when something has changed. If your inbox is quiet, it means nothing changed.
- What changed. One sentence, no jargon. "Your certificate expires in 6 days."
- The fix. The exact thing to change, and roughly how long it takes.
- The all-clear. When your site comes back online, we tell you that too.
Who this is for
VigiLayer is built for people who own a website but were never meant to babysit one.
A shop, a clinic, a restaurant. Someone built the site once, it has worked ever since, and nobody has looked under the bonnet in years. We look every day, so you never have to learn how.
Your checkout is your till. A certificate expires quietly and the till stops taking money, with nothing to show for it but customers who left. We tell you before they do.
Your portfolio is your handshake. A browser warning across it says something you never meant to say, to precisely the people you were hoping to impress.
You look after everyone else's site. Checking them by hand is twenty tabs and a lot of squinting at padlocks. Here it is one dashboard, and you only ever look at what changed.
Certificates, DNS and email records all fail silently. Nothing announces itself, so something has to be watching. We can do that for you.
If you have a security team, they already have better tools than this. VigiLayer is for the many businesses that have a website but nobody whose job it is to look after it.
Cheaper than one bad weekend
Billed monthly or yearly, in US dollars, cancel whenever you like.
- One website
- Five manual scans a month
- Your full list of findings, in plain English
- Three websites
- Unlimited scans
- Daily automatic scans
- Email alerts the moment something changes
- Detailed reports
- Up to 25 websites
- Unlimited scans
- Daily automatic scans
- White-labelled reports with your own name on
Questions people ask first
Will this slow down or break my website?+
No. Every check is passive: we look at your site the same way a visitor's browser does. There is no plugin to install and no code to add, so there is nothing that could break.
Do I need to be technical?+
No. Every finding is written for the person who owns the business, not the person who built the site. Each one says what is wrong, how serious it is, and what to change. If someone else looks after your site, you can forward them the fix as it is.
Why do I have to prove the website is mine?+
So nobody can point VigiLayer at a site they do not own. You add one small record to your domain settings, and we only accept it once two separate DNS providers both see it. It takes about five minutes, most of it waiting.
How often will you email me?+
Only when something changes. A scan that finds nothing new sends nothing, so a quiet inbox means your site is the same as it was. Email alerts are part of the Pro and Agency plans.
Does it check for malware or blacklists?+
Not yet. That check is coming, but today VigiLayer will not tell you if your site has been flagged for malware. We would rather say so than let you assume it does.
Can I cancel?+
Yes, whenever you like, from your account page. Your plan keeps running until the end of the period you paid for, and if you change your mind within 14 days of a payment we refund it in full. See the refund policy for the details.
Find out what your website is telling the internet.
Verification takes about five minutes. Your first scan runs the moment it clears, and you will know more about your site in ten minutes than you have all year.
Scan my website free @vigilayer on InstagramQuick website safety tips for small business owners. Follow