Scan coverage

Make security and privacy risk visible

60+ scan modules cover website, network, AI, KVKK, and Privacy (GDPR · CCPA) in one panel — plus intent-based scenarios, CMP audits, scheduling, and free BeeAI after the scan.

01

Website security

Deep web controls that protect visitor and customer data.

  • HTTPS, SSL, and deep TLS analysis
  • Security headers, CSP, HSTS
  • Cookie security (Secure, HttpOnly, SameSite)
  • JWT, CORS, GraphQL introspection
  • JS supply chain and third-party scripts
  • Sensitive paths, mixed content, form / redirect
  • Authenticated (logged-in) crawl

Read the docs →

02

Network & infrastructure

Your external surface: DNS, email auth, CDN/WAF signals.

  • SPF, DKIM, DMARC, and DNSSEC signals
  • Subdomain takeover risks
  • WAF / CDN detection
  • Cloud storage exposure signals
  • Sensitive open-port checks

Read the docs →

03

AI security

Inventories AI chat and model surfaces; shows leakage risk in business language.

  • AI component and endpoint inventory
  • Prompt injection signals
  • LLM data-leakage indicators

Read the docs →

04

KVKK & Privacy

Turkey (KVKK) and international (GDPR · CCPA) privacy signals — technical posture visibility, not legal advice.

  • KVKK packs: notices, cookies/consent, rights, İYS, VERBİS signals
  • Privacy packs: GDPR basics + CCPA Do Not Sell / GPC
  • CMP behavioral audit (pre/post consent, reject, dark patterns)
  • CMP signal / TCF / Consent Mode checks
  • Privacy posture score and regime notes
  • Tracker transparency and deep PII signals

Read the docs →

Operations

Product surface after the scan

Don’t stop at a score — pick a scenario, share, schedule, assign, and pay in-app.

Scenario packs

Quick security, Turkey (KVKK), or Privacy (EU · US) — intent-first scope in one click.

Scheduled scans

Weekly / monthly automation with security and privacy presets.

Report sharing & export

Secure links; PDF, CSV, and JSON export.

Security badge

Public SVG badge — a live trust signal for visitors.

Finding management + GitHub

Owners, due dates, notes; push to Issues. Dedupe keeps the list actionable.

Domain verification

Prove authorization via META, file, or DNS.

Alerts & workspace

Email / in-app / webhook alerts; team roles and invites.

Online checkout

Buy credit packs via PayTR; 14-day refund.

Persistent BeeAI chats — free

Finding advisor and workspace chats stay in BeeAI so you can continue later — no credits used.

BeeAI · Free

Your security copilot

BeeAI is free to use

Puts scan results in context, summarizes critical findings, and proposes a manageable remediation plan. Finding-level AI Advisor chats persist in BeeAI — pick up where you left off. No extra credits.

Guardbee BeeAI security chat

Visibility in three steps

1 Verify your brand

Prove the domain; discovery is free. Add authenticated crawl when needed.

2 Run a scan

Pick quick security, KVKK, or Privacy (GDPR · CCPA) — score and findings in one panel.

3 Take action

BeeAI, finding ownership, shareable reports, and scheduled re-scans.

Start your first scan free

New accounts get 25 credits. Discovery and BeeAI stay free.