01
Passive security audit
A headless browser collects real evidence, then modular checks score the surface that attackers see first.
TLS & HTTPS posture · Security headers & CSP · Cookie flags & exposure · Tech fingerprinting
Your first audit is on us
Security, verified.
Your website has blind spots, the gaps that attackers exploit and regulators fine. We find them, explain them in plain language, and help you fix them. Your first audit is free.
- Free first audit
- Safe & read-only
- We can fix it too
veris · audit
LIVETarget
https://acme-store.com
72
Security & compliance score
14 checks · 1 critical · 1 high · 1 medium
TLS / HTTPS enforcedPass
Missing HSTS headerHigh
Cookie set without Secure flagMedium
No GDPR consent bannerCritical
relatorio.pdf · relatorio.mdverified ✓
Audited against the standards that matter
GDPR / RGPDNIS2ISO 27001OWASP Top 10PCI DSSWCAG 2.2ePrivacyTLS 1.3CSP Level 3GDPR / RGPDNIS2ISO 27001OWASP Top 10PCI DSSWCAG 2.2ePrivacyTLS 1.3CSP Level 3
The platform
One app that finds gaps that we can then close.
VERIS combines security and compliance auditing in a single, passive pass, from the TLS handshake to the cookie banner.
02
Compliance & legal
Data-driven rulesets map legal duties to what's actually on your pages.
GDPR / cookie consent · Required policies & notices · E-commerce duties · Multi-jurisdiction
03
Evidence-grade reports
Every finding comes with the evidence we saw and a clear read on the risk, for engineers and executives alike.
Ranked by severity · Clear risk & impact · Markdown + PDF · Plain-language summaries
Soon
Continuous monitoring
Security isn't a one-off. Re-audit on a schedule, catch drift, and prove you stayed compliant over time.
Scheduled re-audits · Drift & regression alerts · Trend history · Verified badge
How it works
Any website verified in four steps.
No set up needed. Here's how we verify any website, step by step.
01
Request
Send us the website or app you want checked. Nothing to install or deploy on your end, just tell us the domain.
02
Audit
We run VERIS across every page in a headless browser and gather the evidence: HTML, headers, cookies, TLS and network requests, exactly what a visitor's browser sees.
03
Report
Modular security and compliance checks score every finding by severity, turned into a clear report in plain language that spells out what's wrong and what it puts at risk.
04
Fix
Want the issues gone? This is where we come in: we do the remediation for you and re-check that it's closed, so you end up verified.
The deliverable
Helping you see what might be at risk.
Giving you a report where every issue is ranked, backed by evidence, and explained. Transparency, security and awareness is what matters to us.
audit/acme-store.com
Security & compliance report
Score
72/100
B
1
Critical
1
High
1
Medium
11
Pass
- Criticallegal.banner-cookies
No cookie consent mechanism detected
evidenceTracking cookies set before any consent prompt.riskTracking fires before consent, exposing you to GDPR complaints and fines. - Highsec.headers.hsts
Strict-Transport-Security header missing
evidenceResponse had no HSTS header on HTTPS.riskVisitors can be silently downgraded to HTTP and have their traffic intercepted. - Mediumsec.cookies.secure
Session cookie set without Secure flag
evidenceSet-Cookie: sid=… (no Secure attribute).riskThe session cookie can leak over plain HTTP and be hijacked. - Passsec.tls.protocol
TLS 1.3 negotiated
evidenceConnection negotiated TLS 1.3 with a valid certificate.riskStrong, modern encryption in place. No exposure here.
14 checks · generated by VERISrelatorio.pdf ↓
Why VERIS
Trust is earned with evidence, not promises.
We take the time to ensure your website is safe, so you can prove it, to your team, your auditors and your customers.
Safe by design
Read-only auditing. Only what a browser already sees. No security trespassing.
Made for any team
Whether you're a solo founder or an engineering team, VERIS leads with simplicity and transparency.
Simple and transparent.
Findings anyone can understand: clear evidence, a severity score, and exactly what each issue puts at risk.
Global by design
Focused on jurisdiction and compliance of any country.
We build audits around the jurisdiction and laws of each country your customers are in.
- Portugal
- Spain
- EU
- UK
- LATAM
- Global
Get started
Stop guessing. Start verifying.
Request a free audit on your first domain and see exactly where you stand, security and compliance in one report. Then fix it with us, or on your own.
No credit card · Authorized, passive auditing only
Talk to us
Request your free audit.
Tell us the domain you want checked. We'll run a full security & compliance audit and send back exactly what we find, in plain language, with no strings attached. From there, fix it yourself or let us handle it.
- @hello@verisaudit.com
- ⌖Porto, Portugal · Remote to any place.