Frequently Asked Questions

Getting started is simple:

1. Sign up for a free account on our website
2. Add your first domain to scan (up to 1 domain on the free plan)
3. Run your first scan to see security vulnerabilities
4. Explore your report with actionable recommendations

No credit card required for the free plan. Upgrade anytime to unlock more domains and advanced features.

Yes! The free plan includes:

• 1 domain scanning
• Weekly automated scans
• Basic vulnerability reports
• Email alerts for critical issues
• Core web security checks (OWASP Top 10)

You can upgrade to Pro or Enterprise plans anytime to scan more domains and access premium features.

Continuous scanning means we automatically scan your domains on a regular schedule without manual intervention. This ensures:

• Always up-to-date security posture - New vulnerabilities are detected as they emerge
• Trend analysis - See how your security improves over time
• Automated alerts - Get notified immediately when issues are found
• Historical reports - Compare scan results month-over-month

The free plan scans weekly. Pro and Enterprise plans offer daily scanning.

Vultrik performs comprehensive security assessments including:

• OWASP Top 10 vulnerabilities (SQL injection, XSS, CSRF, etc.)
• SSL/TLS configuration and certificate validation
• DNS security (SPF, DMARC, DKIM records)
• HTTP security headers (CSP, HSTS, X-Frame-Options, etc.)
• Server configuration and exposed services
• Mixed content issues and insecure resource loading
• Common misconfigurations that could lead to breaches

Enterprise plans include advanced penetration testing, security hardening services, and 1-to-1 human assistance from security professionals.

Scan frequency depends on your plan:

• Free Plan: Weekly scans (every 7 days)
• Pro Plan: Daily scans (every 24 hours)
• Enterprise Plan: Multiple daily scans + custom scheduling

You can also trigger manual scans anytime through the dashboard.

Currently, Vultrik scans public-facing domains that are accessible from the internet. We cannot scan:

• Internal IP addresses (192.168.x.x, 10.x.x.x, etc.)
• Domains behind VPNs or firewalls
• Localhost or development environments

For automated scanning in your development workflow, integrations with popular CI/CD tools are available (API access coming soon).

Scan results are categorized by severity:

• Critical: Immediate security risks that should be fixed urgently
• High: Significant vulnerabilities that could lead to breaches
• Medium: Issues that should be addressed but aren't immediately critical
• Low: Minor issues or best practice recommendations
• Info: Informational findings that don't affect security

Each finding includes detailed remediation steps and links to relevant security resources.

Feature	Free	Pro	Enterprise
Domains	1	10	Unlimited
Scan Frequency	Weekly	Daily	Multiple/Day
Integrations	✗	✓	✓
Pen Testing & Security Hardening	✗	Add-on	✓
1-to-1 Human Assistance	✗	✗	✓
Backup Services	✗	Add-on	Add-on

Simple, transparent billing:

• No setup fees or hidden charges
• Monthly or annual billing (save 20% with annual)
• Prorated upgrades - pay only for the time you use
• Cancel anytime - no long-term contracts
• 30-day money-back guarantee on paid plans

Payments are processed securely through Stripe. We don't store your payment information.

Yes, you have full control:

• Upgrade anytime through your account settings
• Downgrade at any time - takes effect at next billing cycle
• Cancel anytime - your account remains active until the end of your billing period
• Reactivate anytime - your domains and settings are preserved

Contact support if you need help with billing changes.

Security is our top priority. We implement industry-standard protections:

• Password hashing with bcrypt (10 salt rounds)
• HTTPS encryption for all data in transit
• Multi-factor authentication (TOTP-based 2FA)
• Secure authentication with JWT tokens and rate limiting
• Data isolation - you can only access your own scan data
• Regular security audits and penetration testing

We implement industry-standard security practices including bcrypt password hashing, JWT authentication, and rate limiting.

No, we never sell your data. We only collect what's necessary to provide our security scanning service. Your scan data, domains, and personal information are never shared with third parties for marketing purposes.

We may share anonymized, aggregated statistics for product improvement, but never individual user data. Read our full Privacy Policy for complete details.

We collect minimal data needed for our service:

• Account info: Email, name, password (securely hashed)
• Scan data: Domains you add, scan results, historical reports
• Usage data: Login times, pages visited (for security and support)
• Payment info: Processed securely by Stripe (we don't store it)

We don't collect sensitive business data or monitor your website content beyond security scanning.

Vultrik integrates with popular security and development tools:

• Slack: Real-time security alerts and scan summaries
• Microsoft Teams: Team notifications and collaboration
• Jira: Automatic ticket creation for critical vulnerabilities
• ServiceNow: Incident management and workflow integration
• Google Chat: Workspace notifications

Pro and Enterprise plans include webhook integrations for automated workflows. API access is currently in testing and will be available soon.

We're here to help! Contact options:

• Email: support@vultrik.com (24-48 hour response)
• Priority Support: Pro and Enterprise customers get faster response times
• Documentation: Check our help guides and tutorials
• Community: Join our user community for peer support

For urgent security issues, email security@vultrik.com.

Scan times vary based on domain complexity:

• Simple sites: 2-5 minutes
• Complex applications: 10-30 minutes
• Large sites: Up to 1 hour

Common issues:

• Domain is temporarily unreachable
• Firewall blocking our scanner
• Very large sites with many pages
• Server responding slowly

Contact support if scans consistently fail or take unusually long.

We appreciate feedback on scan accuracy:

1. Document the issue - Include screenshots and technical details
2. Email support with the scan ID and specific finding
3. We'll investigate and update our scanning logic if needed
4. You can suppress the finding in your dashboard if it's not applicable

False positives help us improve our scanning accuracy for everyone.