How it works for an agency, in short
- You add each client site to one account as the client's authorized agent. The first site is $19 a month and each additional site is $9 a month on the Lite plan.
- Every site gets daily light checks, a weekly scan of what changed, and a twice-daily match of newly published vulnerabilities against its software.
- Reports carry your company name and logo on the cover and every page, with one PDF per client. A small “Scanned by Security Ready” line remains.
- Each finding comes with how to fix it, so a developer who is not a security specialist can act on it. After a fix, one click re-tests that finding and records that it is closed.
- You bill your client whatever you like for the monitoring and the fixes. We do not contact your clients or show them our prices.
Why agencies add security monitoring to maintenance plans
A maintenance plan that only says “updates and backups” is hard to tell apart from the next agency's. A monthly security report with the client's own site on the cover is something a client can see, forward to their boss, and show to a business partner who asks about security.
It also protects you. When a client site is hacked, the first question is who was supposed to be watching. A dated record of what was scanned, what was found and when it was fixed answers that question.
A visible deliverable
A branded PDF each month: an overall grade, what was checked, what was found, what was fixed since last time.
Recurring revenue
Monitoring is a monthly line item with a low cost to you, and each finding is a reason for paid fixing work.
Fewer surprises
Expiring certificates, forgotten test subdomains and outdated software are flagged before the client notices.
What gets checked on each client site
| Check | How often | What it catches |
|---|---|---|
| Certificate, DNS and security headers | Every day | A certificate about to expire, DNS changes, missing protections such as HSTS |
| Scan of what changed | Every week | Newly opened ports, exposed files, new software versions with known weaknesses |
| New vulnerabilities against the site's software | Twice a day | A newly published vulnerability that matches the server, CMS or libraries in use |
| Email anti-spoofing (SPF and DMARC) | With each scan | A domain that lets anyone send email in the client's name |
| Forgotten subdomains | Every day | Old campaign or staging hosts, and DNS records that could be taken over |
| WordPress plugins and themes (Standard plan) | With the internal scan | Outdated plugins and themes with known vulnerabilities, by name and version |
The outside scan uses about 14,000 checks for known vulnerabilities and never runs tests that could take a site down (no denial-of-service tests, no password guessing). The full list of what we check and what we do not is on the home page.
Security Ready is automated scanning. It does not replace a penetration test by people, it does not test deep behind logins, and it does not clean up a site that has already been hacked. If a client needs those, say so in your proposal. Our cost guide explains the difference.
White-label reports: your name, your logo, one PDF per client
- 1
Set your brand once
In Settings, enter the name to show as the report's author and upload your logo (PNG or JPEG). It appears on the cover and on every page.
- 2
Label each site with its client
When you add a site, enter the client's name. Sites are grouped by client in your list.
- 3
Download the report
Each client gets one PDF covering all of their sites: grades, open findings with fixes, what was fixed and what changed in the period, and what was checked.
- 4
Send it your way
Attach it to your monthly maintenance email or your invoice. The report is in English or Japanese, following the language you use in the app.
For clients who must show evidence to a business partner, the findings list and the “fixed” records give them something concrete to hand over.
What it costs you, and what you can charge
Pricing is per site (one host name), per month, in US dollars. One agency account holds all your client sites, so only the first site is charged at the higher rate.
| Client sites | Lite plan, per month | Per site | Standard plan, per month |
|---|---|---|---|
| 1 | $19 | $19.00 | $39 |
| 5 | $55 | $11.00 | $115 |
| 10 | $100 | $10.00 | $210 |
| 20 | $190 | $9.50 | $400 |
| 50 | $460 | $9.20 | $970 |
Lite covers everything in the table of checks above except the internal scan. Standard adds a read-only program that inventories software inside the server (and the WordPress plugin that reports plugin and theme versions), a deeper monthly test with the site owner's written consent, and email support.
What you charge is your decision. Some agencies raise the monthly maintenance fee and include the report; others sell monitoring as a separate line and bill fixes by the hour. We never bill or email your clients.
Start with one site for free: the first in-depth scan needs no payment details. Run it on your own agency site or on one client's site (with their permission) and look at the report before you decide.
Permission: you scan only what your client has authorized
Scanning a system without its owner's permission can be illegal, and it gets agencies into trouble. Security Ready is built around that rule.
- When you add a client site you declare that you are the owner's authorized agent. The declaration is recorded with the date and your account.
- Get the permission in writing first. A sentence in your maintenance contract or a short email from the client is enough; keep it on file.
- Deeper tests (Standard plan) run only with the site owner's written consent, inside the time window and request rate you set.
- If a hosting company or the client ever asks what the traffic was, the scan history shows what ran and when.
Our Terms of Service make the person who declares authorization responsible for it, so do not add a site you have not been asked to look after.
Getting started with your first client site
- 1
Sign up and run the free scan
Enter a site's URL and your email on the sign-up page. Results and a PDF arrive in about 30 to 60 minutes.
- 2
Set your name and logo
Open Settings and fill in the report author. Download the report again to see it under your brand.
- 3
Choose a plan and add client sites
Pick Lite or Standard under Plan & billing, then add each client site with the client's name.
- 4
Turn on alerts
Send alerts to your team's email, or to Slack or another chat tool by webhook, so urgent findings reach the person who fixes them.
- 5
Put the report in your monthly routine
Download each client's PDF when you send your maintenance summary or invoice.
The quick guide walks through the screens, and the user manual covers every setting.
Frequently asked questions
Will my clients see the Security Ready name?
Reports show your company name and logo as the author. A small “Scanned by Security Ready” line remains on the report, and alerts and the app itself carry our name. Your clients do not need an account; you send them the PDF.
Do I need access to the client's server?
No. The outside scan needs only the site's address and your declaration that you are authorized. The internal scan on the Standard plan is optional and uses a read-only program you run on the server, or a WordPress plugin that sends plugin and theme names and versions only.
Does scanning slow down or break a client's site?
The scan sends requests at a limited rate and leaves out tests that could take a site down. Very old or fragile sites can still react badly to any automated traffic, so tell the client when the first scan will run and choose a quiet time.
What happens when something urgent is found?
You get an alert with what was found and how to fix it. After you fix it, “Fixed it, check again” re-tests that one finding and records the result, which then appears in the client's next report.
Is there a referral commission for agencies?
Not outside Japan at the moment. The agency model here is resale: you pay the per-site price and set your own price to the client.
Which time zone and currency do you use?
Prices are in US dollars. Times in the app are shown in your own time zone. The service is operated by KazLinks Inc. in Japan, and support is by email in English.
See where your own site stands — free
The free in-depth scan checks your site from the outside against thousands of known weaknesses and tells you how to fix each one. No payment details needed. For businesses; scans only with the owner's authorization.