You don't need to know what you have installed. Just give us your URL.

Warnbird checks your website for publicly known security flaws in the tools it's built with, and tells you when one has a fix. We're not open yet. Join the waitlist and we'll email you the day you can check your site.

Example alertyoursite.com

Fix available

A tool your site is built with has a known security flaw

Next.js14.2.2414.2.25

Paste this into your AI coding agent

Update next from 14.2.24 to 14.2.25.
Run the tests and tell me if anything
breaks.

Public reference: CVE-2025-29927

How it will work

Three steps. Your AI agent does the technical one.

  1. Add your site

    Paste your URL. That's all we need: no list of tools, no access to your code.

  2. Verify it's yours

    It takes a one-line change to your site. We give you a prompt, you paste it into your AI coding agent, and the agent makes the change.

  3. Get alerted when it matters

    When a known flaw affects your site and a fix is available, we email you. If there's nothing to fix, we don't interrupt you.

Plans

Find out for free. Pay if you want the fix handed to you.

At launch

Free

Tells you whether your site has known vulnerabilities.

  • A check of your verified site
  • A clear answer: affected or not
  • Doesn't include how to fix what it finds

At launch

Paid

Tells you exactly what to change, and keeps checking.

  • The exact fix for each issue: which version to upgrade from and to
  • A ready-to-paste prompt for your AI coding agent
  • Weekly re-checks
  • An alert only when there's something to fix
  • A monthly "all clear" summary when there isn't
  • A dashboard with your latest check and history

Join the waitlist

Trust

We only scan sites you control.

Before we check anything, you show the site is yours by adding a small tag or header to it. If your product lives on several hosts, such as a landing page, an app and an API, you add it to each one.

And if your site is well protected and we can't see anything, we tell you that too. That's a good sign.

Questions

In plain language.

What is a known vulnerability?

A security flaw in a piece of software that has been found and made public, usually along with the version that fixes it. Each one gets a public ID called a CVE. Once a flaw is public, attackers know about it too, so sites still running the old version are easy targets.

Why do you ask me to verify my site?

So nobody can use us to look for weak spots in a site that isn’t theirs. We only scan a site after its owner has shown it’s theirs.

What do you need from me?

A URL and one small change to your site to show it’s yours. You don’t need to know what your site is built with. Finding that out is our job.

Do you touch my code?

No. We never have access to it. When something needs fixing, we give you a prompt and your AI coding agent makes the change.

Agencies and companies

Managing sites for clients?

Watch every client site from one account. No prices yet: tell us what you manage and we'll talk.

  • Many sites under one account
  • White-label monthly reports you can send to clients
  • Alerts routed per site
  • Team access
  • Slack or webhook alerts

Talk to us