ProductTrust page
Show your customers what passed.
A public page and a badge that prove your app was checked, without ever showing a finding or a score.
example.org
- Checked by
- Vallit
- Watched since
- 21 Sept
- Domain owner confirmed
- 22 Sept
What was tested, and passed
Connection and availability
- The app answered normally.
- Its security certificate is valid and trusted.
- No form sends passwords unencrypted or in the address.
Secrets and exposed files
- No secret keys in what browsers download.
- No configuration or source files open to anyone.
Domain and email
- Its domain registration is not close to running out.
Checked every day
30 days agoTodayA badge for your own site.
It shows the date of your last clean check, and nothing more.
You get a week to fix it.
Your page renews every day your app passes. If something serious turns up, it doesn’t flip the same day, because that would tell everyone where to look. You get seven days to fix it quietly. Only then does it say the record lapsed.
- BeforeRenewed
- Day 0Serious finding
- Day 1Paused
- Day 2Paused
- Day 3Fixed
- Day 4Renewed
- Day 5Renewed
- Day 6Renewed
- Day 7Renewed
Fixed on day three. The page renews again, and your customers never saw a gap.
Vallitchecked 29 SeptWhat it will never show.
No findings, no score, and nothing that hints at where a weakness might be.
A findingA scoreWhere a weakness is
What you need first
- A confirmed domain
- No critical or high finding open
See what your app shows to anyone.
Start with a free check. You don’t even need an account to see your score.