Improve website security, trust, and conversions before users notice the gaps.
Talon loads your page like a visitor, checks the public signals that shape trust, and returns prioritized fixes your team can apply — with beta verification to confirm they worked. Your first audit is free, no account required.
Passive, low-impact checks only. Talon does not exploit vulnerabilities or replace an authorised penetration test.
What Talon Checks
MODEL / 04 DOMAINSPublic safety signals, browser protections, cookies, third-party scripts, and visible configuration risks.
Broken routes, failed resources, script errors, redirects, forms, and reliability regressions.
Accessibility, mobile usability, visual clarity, speed, and interaction friction on rendered pages.
Messaging clarity, trust signals, forms, pricing paths, and the steps visitors take before converting.
Live analysis console
Analysis domains
Run an audit to score the four domains.
Exposure summary
Run an audit to profile external exposure.
Actions
External Exposure, Made Visible
EXPOSURE / 05 INSTRUMENTSBrowser protection checks
Flags missing or weakened page protections, shows the exact response value, and explains what to change.
Secure connection health
Checks HTTPS upgrades, certificate expiry, mixed content, and forms that send visitors to insecure destinations.
Third-party dependency map
Shows external scripts, embeds, fonts, and services so you can review privacy and supply-chain risk quickly.
Cookie & storage review
Reviews cookie safety flags and storage key names. Values are never stored or displayed.
Regression detection
Compares re-scans to catch removed protections, new third parties, new cookies, and returning findings.
These are passive, low-impact external checks, not penetration tests. Deeper checks are gated behind domain verification and shipping progressively.
From Finding to Fix
FLOW / 05 STAGES · VERIFY IN BETADetect Live
Talon gathers deterministic, browser, network, and AI-assisted evidence.
Explain Live
Every issue includes its technical and commercial impact.
Fix Live
Talon generates implementation guidance and a self-contained coding-agent prompt.
Verify Beta
Targeted re-checks confirm whether an issue was actually resolved — live for deterministic and supported browser-session findings on saved reports. AI-inferred findings require a full re-scan.
Monitor Beta
Scheduled re-scans detect regressions, new dependencies, and recurring failures. Weekly monitoring with email alerts is in beta.
See Talon in Action
DEMO / CONTROLLEDA controlled example showing how Talon detects exposure, integrity, experience, and conversion risks. No customer data is used.
Content Security Policy is missing
No Content-Security-Policy header was detected in the primary document response.
The browser has no explicit policy restricting which scripts, frames, styles, and external resources may execute.
Add a restrictive Content-Security-Policy header, begin in report-only mode, review violations, and then enforce the final policy.
Every finding is converted into evidence, impact, a copy-ready remediation prompt, and a verification step.
Your Scans Are Private
Customer domains, screenshots, findings, and reports are never added to a public registry. Demo content is fictional and isolated from production scan data.
Read our data handling policyFrequently Asked Questions
REF / 06 ENTRIESWhat does Talon actually check?
Talon loads your live site like a visitor and checks four domains: Exposure, Integrity, Experience and Conversion. Every finding includes evidence, provenance and confidence.
Is this a penetration test?
No. Talon reads what your site already exposes to a normal visitor. It does not exploit vulnerabilities, brute-force, or replace an authorised penetration test.
What is the Talon Score?
A transparent 0–100 score built from the four domain scores. Older reports are clearly marked Legacy scoring model and are never silently reinterpreted.
How much does it cost?
Your first analysis is free without sign-up. Studio is €79/month and Desk is €179/month for recurring analyses, PDF export and weekly monitoring. Full details are on pricing.
Can AI coding tools use Talon?
Yes. Every finding ships with a self-contained remediation prompt your team can paste into a coding tool. Prompts never include secrets, cookies or private report URLs.
Do you store the sites I analyse?
Reports are private by default and never publicly listed. Signed-in users can delete saved reports or their account. Sensitive values are redacted before storage, and cookie or storage values are never stored. See the data handling policy.
Contact
CHANNEL / SECUREQuestions, authorisation requests, security reports or partnership enquiries: send a message and the team will respond.