CheckFix Reviews & Product Details

CheckFix is an automated external security assessment for your company. It shows you what an attacker sees when they look at you from the outside, and it tells you what to fix first. You enter your domain. CheckFix discovers your subdomains and runs a 15-step external analysis covering mail security, TLS configuration, known vulnerabilities (CVEs), security headers and exposed internet-facing services. The result is an A–F rating, both overall and per category, plus a prioritized to-do list. Every finding shows where the problem sits and how urgent it is: immediate action, short, medium or long term. Your admin or IT service provider can work through the list directly. No consultant has to translate it first. Once the fixes are done, a recheck shows whether they worked. We built CheckFix on more than ten years of manual penetration testing at secinto in Austria. It automates the external part of that work. That way small and mid-sized companies can check their security regularly instead of once every few years. AI Pentest add-on The external scan shows you where the doors are. The AI Pentest add-on tries to open them. It starts from your CheckFix results. In the dashboard you select single hosts or your entire scope, and you book a package of runs. Our own pentest agent works through the targets on our in-house hardware. No third-party cloud AI is involved. One of our human pentesters verifies every finding before it appears in your dashboard. The built-in Report Builder produces everything from host-level detail reports to an executive summary. After you've patched, you can use your remaining runs for retests. You get real pentest depth at a fraction of the cost of a comparable manual test. Audit Mode Customers, auditors and regulators increasingly want proof, not just a score. Audit Mode turns your CheckFix results into an audit-ready document, generated straight from the dashboard. For each open finding you add a management response. You document which residual risks you accept and why, and you set an action plan that says what gets fixed by when. The result is the evidence auditors ask for under NIS2, DORA, ISO 27001 or TISAX. Who it's for CheckFix works for any organization with an internet presence. For SMEs, a website and a mail server are enough to get meaningful results. Larger companies and organizations subject to NIS2, DORA, ISO 27001 or TISAX use CheckFix as a regular external security assessment within their security program. Suppliers use it to prove their security to larger customers. API keys are available, so you can pull results into your GRC tool or other systems. All data is hosted in the EU.