deskkit Audit checks a website the way somebody probing it would: what the server admits about itself, which protections are missing, and which files and paths are reachable that were never meant to be. The requests come from your computer — we never see the site you scanned or what was found.
Free — $0. Checks a site from the outside: what the server gives away about itself, protections that are missing, certificate and DNS records, and what has been left open to search engines. You get the whole report on screen. It cannot save a PDF and does not look for hidden pages.
$15 a month. Also finds pages that were never meant to be public — forgotten admin panels, backup files, open folder listings — and lets you save the report as a PDF to send on.
$39 a month. Also scans inside your own network: which devices and services are reachable, a single machine you point it at, and which folders are shared with whom.
Every finding says what was observed, where, and what to change. There is no grade, no gauge and no “contact us to unlock the details” — the detail is the product. A scan of a small public site typically produces a handful of significant findings and a longer list of hygiene items.
On a paid plan you can export the whole thing to PDF, which is usually what a client or an auditor actually asks for.
The free tier is not a teaser. It returns a real, complete report for an external scan. The paid tiers widen what can be reached — deeper discovery, then your own network — and add the PDF export.
1. You pay through Paddle. Your card details go to them, never to us — they are the seller of record.
2. Your tier opens on the deskkit account you are signed in with, usually within a few seconds.
3. Open the Windows app, sign in with the same email, and the paid checks are unlocked. Nothing else to install or enter.
You need a deskkit account first — the app signs in with it. You can cancel any time from your account page; there is no minimum term.
Ending a plan does not lock the program. When a subscription stops the tier drops back to Free and the app keeps working — you keep the reports you have made and you can still run external scans. Nothing you paid for is taken hostage.
Open the app and click Sign in with Google. Your normal browser opens, you approve the account, and the app is signed in. Nothing to choose, nothing to type, no confirmation email to wait for — and no password of ours for anyone to lose, reset or leak.
Your plan is downloaded once, and the app can check it is genuine on its own, without needing to ask a server each time. Scanning does not phone home. Once you have signed in, it keeps working with no connection for 14 days, then checks in again the next time you are online.
One subscription covers three machines. The approval screen shows which machines are on your account and lets you remove one to free a slot — so a dead laptop never locks you out of what you paid for.
One file, no installer. Download it, double-click it, sign in with the account you set up here. It runs from wherever you put it and can be deleted the same way.
Windows 10/11 · 64-bit · version 1.0.2 · portable, nothing is installed.
Size 100.2 MB (shown as 95.5 MiB in some places — same file).
SHA-256e23d61421c6a0c0782f87058e1068e7277f7c7252207072d51123e75aaab8150
Want to check the file is the one we built? In Command
Prompt: certutil -hashfile deskkit-Audit.exe SHA256 — the
line it prints should match the one above.
You will see a blue box: “Windows protected your PC”, and it will say the publisher is unknown. Click More info, then Run anyway.
This is not a virus warning. It appears because the app is not code-signed yet — we have not bought a signing certificate. Windows shows it for every unsigned program, new or not. The SHA-256 above is there so you do not have to take our word for it: check the file yourself.
Want a message when a new version is out? Leave an address — one email per release, nothing else.