Redvisor
Loading Visor-07 coreOK Syncing public advisoriesOK Calibrating visor sensorsOK Connecting to Robinhood ChainOK
Starting up000
Turn on sound for the full experience ↑

See whatthey seefirst

Passive scanner · Sites and Pons tokens

Paste a domain or a contract. REDVISOR grades what an attacker can already see, and tells you how to fix it.

Scan unit

Visor-07

The scan engine. It reads what your site and token already show the public, then grades it.

7 AREAS

Encryption, browser protection, email and DNS, software, exposure, contract and launch.

Passive ONLY

It never logs in, submits forms or sends exploits, so any public domain can be read safely.

Built for PONS

It reads Pons launches on Robinhood Chain: owner controls, deployer holdings and creator tax.

Always watching

Find it before
they do

A missing header on a Web3 site can become a wallet drainer. Every finding comes with its fix.

A good grade is not an audit. It shows what is exposed in public, right now.

● Run a scan
Scroll

What it checks

Every scan reads public information and returns a grade, each finding, and the fix for anything that failed.

TLS

Encryption

Certificate trust and expiry, TLS version, and whether plain HTTP moves visitors to HTTPS.

CertificateTLS 1.3Redirects
WEB

Browser protection

The headers that stop injected scripts and clickjacking, the attacks behind most wallet drainers.

CSPHSTSFrame protection
DNS

Email and DNS

Who can send mail or get a certificate in your name.

SPFDMARCCAA
CVE

Software and exposure

Exposed versions matched to published advisories, plus subdomains in certificate logs and the Quad9 blocklist.

OSVCertificate logsQuad9
PONS

Contract and launch

Owner controls, deployer holdings, creator tax, graduation, and supply at the dead address.

Robinhood ChainPonsOn chain
What attackers look for first
Wallet drainersPhishingClickjackingScript injectionFake mailDomain spoofing
Exposed versionsExpired certificatesCopycat sitesHidden ownersDeployer bagsSubdomain takeover

How a scan works

Six steps, all from the outside. Nothing is changed on your site, and nothing is signed.

IN

Enter

Paste a domain or a 0x contract.

RD

Read

Fetch the page, headers, DNS and chain data.

CK

Check

Compare each result against the rules.

CV

Match

Look up exposed versions in public advisories.

GR

Grade

Score every area from A to F.

FX

Fix

Show what failed and how to repair it.

Every scan and every agent reads public data only.

7AREASChecked across sites and Pons tokens
0LOGINSNo access needed, and no wallet to connect
5MINA fresh result can be run again after five minutes

Five agents, four live

Verified owners get agents that keep watching. They prepare the work. Nothing touches your server until you apply it.

Running

Sentinel

Rescans your verified sites every six hours and reports what changed: new failures, certificate expiry, blocklists and software versions.

Running

Hunter

Rechecks the software on your sites when CISA confirms a newly exploited vulnerability, and alerts if your address appears on a botnet or hijack list.

On demand

Guardian

Drafts firewall rules for a site from its latest scan. You review them and apply them yourself.

On demand

Patch

Writes the fix for each finding as steps and config for the stack the scan detected.

Coming

Chain

Will watch the contracts and wallets tied to your project. It is still in development.

Roadmap: Scan live · Monitor live · Defend and patch next · Web3 shield after that.

● Open the dashboard

Scan your project

Enter a public domain or a contract on Robinhood Chain. The result arrives in seconds.

Passive checks on public information.Not an audit.