Observed arrival · 2026-09-03
SUTROS: A Website Checkup for the Small and Local
SUTROS checks a website for security risks, broken pages, and outdated components, then explains the findings in plain English.
Field notes
The service combines deterministic reconnaissance with an LLM that selects and prioritizes follow-up probes, then uses a read-only browser pass to inspect customer-like flows. Its published checklist includes exposed .env and .git files, backups, keys, source maps, vulnerable JavaScript libraries, CSP, CORS, cookies, forms, and CSRF hygiene. Reports are described as public, printable, and email-ready, with an A–F grade and a plain-language fix for each finding.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue