Know when something breaks
before your customers do
Private AI agents watch your website for security holes, broken pages and forms that stop working, and tell you first.
- Private, local AI models
- A person reviews every finding
- Checks from $99
Or email joe at sapidlabs dot com
How it works
A check to start, agents on watch after that
- 1
Check
Agents walk your site like a customer and probe it like an attacker.
- 2
Review
A person reads every finding. You get the fixes, spelled out, and a call to go through them.
- 3
Watch
Guardian keeps checking and tells you when something changes or a new vulnerability hits.
Pricing
Pick how closely we watch
Start with one check. Each tier includes the one before it.
tier 1
Website check
$99one time
A full check of your website and everything around it, covering security and the things your customers run into: broken pages, forms, mobile layout. Passive, so nothing on your side breaks.
- Every page walked on a desktop and a phone, the way a customer would: broken links, script errors, layouts that break and text that gets cut off
- Buttons, menus and forms tapped one by one, with a screen recording of anything that doesn't respond
- Up to 3 domains, plus every subdomain and published address we find under them: security headers, TLS, DNS and email authentication (SPF, DKIM, DMARC), exposed files, third-party scripts, page source and breach exposure
- A map of everything we found and a severity-rated PDF report with concrete fix steps
- A 30-minute call to walk through the findings
- One retest after your team applies the fixes, within 60 days
5-business-day turnaround · extra domains $150 each
tier 2
Best valueGuardian
$49per month
The check, running continuously, so you hear about a problem before a customer or an attacker does.
Everything in the website check, continuously, plus:
- Continuous monitoring, with an alert when something changes
- Quality and UI: pages, forms and buttons that stop working, layouts that break on phones, new script errors and broken links, with a recording of what broke
- Security: new subdomains, scripts and certificates, header and DNS drift, and new vulnerabilities in software you run (WordPress plugins, frameworks, servers) or versions that reach end of life
- Proof that fixes actually landed
- Your site map and open fixes in the client portal, always current
- Questions by email anytime
Month to month · cancel anytime
tier 3
Partner
$1,000per month
Agents on your own systems. We connect them to your logs, error dashboards and the tools you run the business on, plus the AI integrations and automations that take busywork off your plate.
Talk about a partnershipEverything in Guardian, plus:
- Agents watching your logs and error dashboards every 30 minutes, with a person reviewing what they flag
- Custom checks for anything else you want watched, like a checkout flow, a booking calendar or a shared inbox
- Interactive security work: authenticated app testing within an agreed scope, fix reviews, and help with vendor security questionnaires
- AI integrations built into the tools you already use
- Automations for the repetitive stuff: intake, follow-ups, reporting, data entry
- A monthly working session and priority turnaround on questions
6-month minimum
The math
Why watching beats a snapshot
Your site changes every time someone adds a plugin, a script or a subdomain, and new vulnerabilities get published every week. A check is a snapshot. Guardian keeps watching, for less than buying that snapshot every month.
Twelve one-off checks
$1,188 / yr
A fresh check every month, bought one at a time, and nothing in between.
Guardian
$588 / yr
Continuous monitoring and alerts when something changes, for less.
Partner
$12,000 / yr
Guardian, plus agents on your own logs and tools, AI integrations and automations.
Coverage
What the agents check
Your site, as customers see it
Broken links, script errors, pages that break on phones, and buttons that don't do anything when tapped.
Headers and TLS
Security headers, certificate setup, protocol and cipher support.
DNS and email
SPF, DKIM and DMARC, plus the DNS records people forget about.
Exposure
Public files and paths that shouldn't be reachable, and subdomains you may not know you have.
Supply chain
Every third-party script your pages load, and what it's allowed to do.
Page source
Comments, keys, internal URLs and debug output left in what you ship.
The website check and Guardian are passive. We only look at what anyone on the internet can already reach, so there's nothing to schedule around. Active testing happens only on the partner tier, inside a scope we agree on in writing first.
Not sure where to start?
Get the one-off check. The report will make it clear whether you need anything more.
Want to know what's broken right now?
Start with a $99 website check