Two-factor sign-in
Add an authenticator app so a stolen password is not enough. Recovery codes get you back in if you lose your phone, and browsers you trust can skip the code for a while.
Security
Safe to point at
Safe to point at
a client's site.
Agencies run WebRankPage on sites they do not own, for clients who expect care. Here is how we protect those sites, your team's access, and the data in between.
- Read-only on every site
- Two-factor sign-in
- Access by role, per workspace
Protecting your account and your team
Guessing does not pay
Repeated wrong attempts slow sign-in down, both for the account being tried and for wherever the attempts come from, so a leaked list of passwords is not worth running against us.
Sign out everywhere
End every other session in one step from your account. Resetting a password does it for you, because that is what someone does when they suspect a problem.
Roles for every workspace
Owner, admin, member or viewer, set per client workspace. A freelancer you bring in for one client sees that client and nothing else.
API keys you control
Each key belongs to one workspace, is shown once when you create it, and can be revoked at any time without touching any other. We keep only a fingerprint of it, never the key itself.
Confirmed addresses only
Every account confirms its email address before it can do anything, so invitations, receipts and alerts reach the person they are meant for.
Protecting the sites you analyse
Your clients did not ask to be analysed, so a visit from us has to be one they would never notice for the wrong reasons.
A service that fetches any address it is given is also one somebody will try to aim at the wrong place. Every address, and every redirect along the way, is checked before we connect, and anything that is not a public website is refused. Addresses built to abuse SEO tools are turned away before any work starts.
When we visit a site, we
- Only read: never submit forms, sign in or send anything that could change it
- Say who we are, and follow its robots.txt
- Fetch one page at a time, with a pause between them
- Stay on that site, never following links away from it
Your data
We keep the reports you run, with a copy of each page as we fetched it, so a report opens again without visiting the site a second time. Alongside them, your account, your workspaces and who you invited.
Each report lives at its own hard-to-guess link. It is never listed anywhere and search engines are asked to leave it out, so it is read by the people you send it to. History and tracked pages need you to be signed in.
Delete your account and it goes, along with the workspaces you own. See Privacy for what that covers and GDPR for your rights.
Payments
- You pay on the provider's own secure pages
- We never see or store a card number
- Every payment notice is verified as coming from the provider
- A plan changes only once the payment is confirmed
We protect this site with the same browser safeguards our reports check your site for.
Found a problem?
If you think you have found a security issue, please tell us before telling anybody else, and give us a way to reach you.
We would rather hear about something small than not hear about it.
Report an issue- Tell usWrite to us through the contact page with enough detail for us to see what you saw.
- We confirmWe let you know it arrived, so you are not left wondering.
- We fixWe look into it, put it right, and tell you what we found.
Free forever · no card
Run it on a page you care about.
Run it on a page you care about.
See what it says.
Nothing is withheld on the free tier. An account adds the part a single report cannot give you: a record of whether anything you changed actually worked.
- Every report you run, kept
- Compare a page over time
- Three reports a day, not one
- Every check, same as the paid tiers
Create free account
Free forever · no card required
Already registered? Sign in
- TLS encrypted
- Instant setup
- No card needed