Squall Typhoon Fleet
Squall on the night harbour with a signal lamp raised, the beam reaching out over the water
SquallAssurance, sites and codeIn service, phase 0

Serious security checks, without a security team.

Squall runs proven open-source security tools against your app, your code and the services it relies on. A person reviews what they find. You get the proof and the fixes.

Start with your domain Log in
Open-source tools Read-only Runs on our own apps every night

What Squall carries.

Six checks, each one a piece of kit. Each runs on our own apps before it runs on yours.

Header and TLS readReads a site's security headers and certificate.
Secret scanLooks for keys and passwords left in code.
Dependency auditChecks the packages a project depends on for known flaws.
Code vulnerability auditReads the code itself for common weaknesses.
Email records checkChecks SPF and DMARC for a domain.
DNS ownership proofProves you control a domain with a DNS record.

Mapped to the NIST Cybersecurity Framework 2.0: Identify, and part of Protect. What that covers and what it leaves out

We are at phase 0.

Each phase lights up more of the map. Every capability runs on our own apps before it joins Squall.

Phase 0 (now)

Your app and its code

  • Weak spots in your site and code
  • Passwords and keys left in code
  • Third-party parts with known defects
  • Where your app sends data
  • Nightly re-checks
Phase 1

AI and the internet edge

  • AI chatbots and features
  • What your domain shows the internet
  • A one-page verdict and retest view
Phase 2

Accounts and cloud

  • Cloud and publishing accounts
  • Findings matched to regulations
Phase 3

Your defences

  • Would your alarms fire

What Squall covers along an attack, and what it leaves to others →

From first email to first findings.

Ownership comes first. Squall checks only what you have shown is yours.

1

Prove it's yours

Add a DNS record to your domain or give read access to your repo. Then confirm a short scope.

2

We run the checks

Open-source tools run read-only. A person reviews the findings and clears false alarms.

3

You decide what to fix

Findings come ranked with their proof. Nightly re-checks report only when something changes.

Shipping soon?

Start with your domain in about two minutes. For a code review, email us your repo.

Start with your domain Email about your code Log in