Overall safety-
VulnerableSafe
What was checked
How this is worked out
An estimate from what KesTivra can see from outside. 100% means no open warnings among the checks that ran, not a guarantee. The word next to it only says "Safe" when every check ran recently.
Background monitor
-
Desktop popups
-
Vulnerability lookups
Open warnings0
Needs your attention
All warningsHealth
Accepted risks
You chose to live with these. They are still present (accepted, not fixed). KesTivra still checks them; they're left out of the safety score.| Warning | Why | Accepted |
|---|
Your redirects
Pages you said send visitors on to an address of yours. KesTivra doesn't warn about these, and warns again if one starts going anywhere else.| Page | Goes to | Added |
|---|
Recently resolved
One ordinary request to that page: security headers, cookies, http:// leftovers, injected-code patterns, outdated scripts. It doesn't change the background monitor's warnings. Only your sites below can be checked.
Result
Your sites
Sites the URL box may check
The background monitor still watches your own website only. Added sites are for one-off page checks.
Things to look at
Spam and hidden pages first. The small ones help Google show your pages well.Pages checked
| Page | Answer | Title | Problems |
|---|
Is it one of yours?Your shop uses some services from other companies, such as PayPal for payments or Jetpack for visitor stats. When a page starts loading something from a website KesTivra hasn't seen before, it asks you here.
Yes, I use itPress Yes, I use this. KesTivra stops asking about it.
Not sureLeave it here and press Ask my site manager. Unknown websites are how card-stealing code gets in, so it's fine to wait.
Waiting for your answer
Websites you've approved
KesTivra won't warn about these. Remove one if you stop using that service.Your website
-
The one website KesTivra watches.
Alerts
Desktop popups
Windows popups from the background monitor when something new is found.
Popup for
The lowest severity that raises a popup. Everything still shows here.
Browser notifications
Notify from this console while it's open, even in another tab. Saved in this browser only.
Test a popup
Shows one desktop popup so you can confirm alerts reach you.
Timing
Homepage check every
10 to 3600 seconds.
seconds
Full scan
The certificate, exposed files, versions and known vulnerabilities. Your domain's email settings (SPF, DMARC) are checked once a day and with every full scan you start.
Full scan when I open KesTivra
Also runs one each time you open KesTivra, unless one finished in the last 15 minutes.
Remind me of open warnings every
1 to 720 hours.
hours
Say "site down" after
Failed homepage loads in a row, 1 to 100.
failures
Warn before the certificate expires
1 to 365 days.
days
Pages and trust
Extra pages to watch
Comma-separated paths on your website, or pick them on the Site map page. Store pages are where card skimmers hide.
Always-trusted hosts
Comma-separated exact host names, e.g. stats.wp.com. Prefer approving them one by one under Outside websites.
WPScan API token
Lets the monitor look up known vulnerabilities (free plan: 25 lookups a day). Stored in config.json on this PC and never shown again.
About & updates
KesTivra
To look for a newer version, open License & updates. Updating keeps your settings, warnings, approvals, schedule, history and license.
Need help?
Create a support report: one zip file with KesTivra's version, settings and logs, to send with your question. KesTivra removes the tokens and keys it knows about; you'll see the list of files before it's made.
The zip will contain
Website addresses, page paths and warning titles are included. Press Cancel if you'd rather not send them.
When should KesTivra start?
Switch off completely
Uninstalling, or taking a long break?
Most people never need this. Stop now only pauses KesTivra until the next start-up. This switches it off for good: it won't start with Windows or on its schedule until you save a start-up setting again. Use it before uninstalling KesTivra, or while your website is being rebuilt and would set off lots of false alarms. Your settings, warnings and history are kept.
Python for the start-up task
Did KesTivra say its start-up task uses a Python it doesn't recognise?
KesTivra only changes a start-up task that runs this folder with a Python it approved, so nothing else can pose as KesTivra. If you installed a new Python, or set the task up yourself, press this button to let the task use the Python this console runs on. KesTivra first checks that this Python can run KesTivra and changes only which Python the task starts. A running KesTivra keeps running until its next start, except one started by a task from before KesTivra 1.6.1: that one is started again under KesTivra's own task name, so KesTivra can stop it later.
Copy and paste this into your AI assistant
Works with ChatGPT, Claude, Gemini or Copilot.How to use it
- Pick the warnings to fix below. High ones first.
- Press Copy prompt and paste it into your AI assistant.
- Take the backup it tells you to take before changing anything.
- Follow one step at a time. If something looks different from what it describes, stop and tell it what you see.
- Never paste passwords, API keys or customer details into the chat.
- When you're done, come back and press Run full scan to confirm the warning has cleared.
About you
Your experience
Warnings to include
License
-
Your license
Enter your product key
It's in your purchase email and starts with SNTL-. KesTivra sends it once, over a secure connection, to activate this PC. It never saves the key or shows it again.
No internet on this PC? Activate offline
- Press Save activation request. It saves a small file with this installation's ID (no key, no personal details).
- On any device with internet, open the offline activation page, enter your product key and this installation's ID, and download the activation file.
- Bring the file to this PC and choose it here:
Check the license now
Asks the licensing service for this license's current status. If the service can't be reached, nothing changes and monitoring carries on.
Move KesTivra to another PC
Removes the license from this PC so you can activate another installation. Scans here pause until a license is active again. Your history and settings stay.
A KesTivra license is yours to keep: it never expires and includes free updates for as long as KesTivra is maintained. It doesn't include services from other companies that KesTivra can use, such as a WPScan plan, or your website hosting.
Updates
Installed version
KesTivra only looks for updates when you ask. It never installs anything on its own.
Update channel
Stable is recommended. Preview gets new versions a little earlier, for people who like to test.
Check for updates
Recent updates
User agreement
Read the KesTivra user agreement
Loading...
KESTIVRA
A clear view of your website's security. One place to act.
1
Which website should KesTivra watch?
The address people type to visit your site. KesTivra only ever looks at this one website.
2
Confirm it's yours
3
Accept the user agreement
It explains what KesTivra does and doesn't do, and what you agree to when you use it.
Read the KesTivra user agreement
Loading...
Safety score
At the end of each day, 0 to 100%Homepage speed
Average seconds to load, each day. Lower is better.Day by day
| Day | Safety | Online | Speed | Open warnings |
|---|
Last console job
Nothing has run from the console yet.