I built a website security scanner as a side project. 6 months in, 0 paying customers. Feedback welcome.

Hi all,

I work in security by day and started Zenkai six months ago as a side project: a website security scanner for small businesses in the Netherlands. You enter a domain and get a plain-language report (no jargon) with advice per finding.

The free scan runs 6 checks and shows the report right on the page, no account needed:

– Security headers (CSP, HSTS, X-Frame-Options)

– SSL/TLS (certificate and TLS version)

– SPF/DMARC (email authentication, so people can't easily send fake mail as your domain)

– OWASP indicators (information disclosure and misconfigurations)

– Open ports (via Shodan)

– URL reputation (malware and phishing check)

You confirm that you own the domain before it runs. The deeper scans (14 to 66 modules) are paid and only run after you prove ownership with a DNS TXT record, so nobody can scan a site they don't control.

Try it here: https://scan.zenkai.nl

Where I am honestly: I've built a lot and have no paying customers yet. I tried cold email to accountancy firms, which got a handful of replies and no sales. I've since changed the site and I'm now putting the free scan front and center instead of selling first.

What I'd like feedback on:

1. Would you pay for this, or is a free tool like Internet.nl or SSL Labs enough for you?

2. Is it clear what you get from the free scan?

3. How would you reach small business owners who don't know they need this?

Happy to answer questions about how it's built or about the cold email results. Thanks for reading!