Questions, answered.

SSL/TLS configuration, HTTP security headers, DNS records and uptime for any public site. Connect WordPress, Shopify or GitHub and AltOps runs deeper, platform-specific checks on top of that baseline.

No. A URL is enough to start scanning any public website. For WordPress, deeper checks and real-time signals come from a lightweight connector you install yourself, never your admin credentials.

Every finding is broken down into Reason (why it was flagged, in plain language), Risk (what could happen if it isn't fixed), Consequence (what your business could lose), and Recommendation (what to do next, and how urgently).

Continuous. AltOps keeps watching after the first scan and surfaces new risks as they appear, instead of leaving you with a report that goes stale the next day.

You get an alert as soon as it's detected, with the same reason/risk/consequence breakdown so you know exactly what to act on and how urgently.

Up to 200 websites and stores on a single account, whether they're plain URLs, WordPress installs, Shopify stores or GitHub repositories.

Yes. Invite people to your organization by email and give each one a role — owner, admin or member. Invitations are single-use links that expire on their own, and you can resend or revoke them anytime from the Organization page.

Yes, on the AltOps Premium plan. AltOps scans public repositories for exposed secrets and API keys, alongside your website scans.

Yes. Create an account and you're instantly on the free plan — 1 monitored site, 1 scan a day, no credit card required. Upgrade to a paid plan whenever you're ready for more.

Yes. Billing runs through Stripe and you can cancel anytime — your plan stays active until the end of the period you already paid for, then your organization returns to the free plan's limits.