A free AI penetration test for your website
Our AI agent tests your website the way an attacker would. Our volunteers check every finding and send you a plain-language report on what to fix first. No cost, and no sales pitch afterwards.
- Free of charge, run by a non-profit
- Only with your written permission
- Results stay confidential
Request your free test
We reply within a few days. Nothing is tested until you've signed off on the scope.
What we look for
The weaknesses attackers most often use against small organisations' websites.
Outdated software
Old versions of your CMS, plugins or server software with known, published vulnerabilities.
Risky configuration
Admin panels open to the internet, debug pages, directory listings and missing security headers.
Common web attacks
Injection, cross-site scripting and broken access control: the flaws attackers try first.
Exposed files
Backups, configuration files or passwords accidentally left where anyone can download them.
Login security
Login pages without protection against password guessing, and weak password-reset flows.
Verified results only
Our volunteers check every finding by hand, so your report has no false alarms.
How it works
Four steps, and you stay in control of every one. We never test a website without written permission from its owner.
- 01
Request
Fill in the form. It takes about two minutes.
- 02
Agree the scope
We email you to agree what we test and when. You sign a one-page permission agreement, and we confirm your organisation controls the website.
- 03
Test
At the agreed time, our AI agent tests your website under the supervision of our volunteers. We avoid anything that could change or delete your data.
- 04
Report
You get a plain-language report that ranks each issue by severity and explains how to fix it, and we go through it with you.
Why is it free?
MaaSec is a non-profit association based in Maastricht that protects small businesses, non-profits and community organisations across the Netherlands that can't afford professional cybersecurity services.
Our volunteer members provide free security assessments, advice and awareness training. All income is reinvested in our activities and is not distributed to members.
Questions
What is an AI penetration test?
A penetration test is an authorised, simulated attack on your website, done to find weaknesses before real attackers do. We use AI agents to run many of those checks quickly, and our volunteers review every result, so you only receive real, verified findings.
Is it really free?
Yes. MaaSec is a non-profit association run by volunteers. All of our income is reinvested in our activities and none of it goes to members. There's no fee, and you're under no obligation afterwards.
Could the test break my website?
We test at a time you choose, stay within the scope you approve, and avoid tests that change or delete data. If something looks risky, we stop and ask you first.
Who can apply?
Small businesses, non-profits, foundations, clubs and community organisations anywhere in the Netherlands that can't afford a professional security test.
What do you need from us?
Your website address, someone who can sign the permission agreement on behalf of your organisation, and time for a short call to go through the results.
Who sees the results?
Only you and the volunteers working on your test. We never publish findings or share them with anyone else.
Find out how your website holds up
Free, confidential, and only with your permission.
Request your free test