Monitoring, testing and security for the websites you own
Know your site holds.
Uptime monitoring, load testing and security scanning for the websites you own, with one dated report anyone can read.
Free plan: 10 sites, checked every 5 minutes. No card needed.
Overall grade
88 / 100
Security assessment
Sample reportExample site
High
0
To fix
3
Passing
24
Summary
Solid fundamentals: no high-severity findings and 24 checks passing. Three hardening items keep it from an A: a Content-Security-Policy that still allows unsafe-inline and unsafe-eval, and two missing cross-origin headers.
Try a free check.
3 free checks a day with each checker. The Down Checker never needs an account.
3
regions the free checkers can ask at once: Virginia, Ireland and Mumbai
30+
checks in every security scan, each one explained
1 min
between uptime checks at the fastest setting, on Pro and Business
A–F
a grade on every scan, with what would raise it
Is the site sound? Three tools, three partial answers.
Is it up?
An uptime monitor says the site answered a minute ago. It cannot say what happens when a campaign brings ten times the visitors.
Will it hold?
A load test shows where the site slows down. It is usually a separate tool, run once before a launch and seldom again.
Is it safe?
A security scan lists what is misconfigured. The list is written for an engineer, and the person who asked is rarely one.
When a client or a director asks whether the site is sound, the answer is spread over three dashboards. BCDRPulse asks all three questions from one account, and every answer comes as a dated report you can pass on.
Three steps. The first one, once.
Prove the site is yours
Add one DNS record. Nothing is ever tested until the owner has proved it.
Run a test
Monitor it, load it, stress it or scan it. Each test starts from your dashboard.
On the Pro plan
Read the report
A dated PDF with the measurements and a summary written for people who do not run servers.
No high-severity findings. Three hardening items left.
Three jobs. One account.
Monitor.
Know within minutes when a site goes down, and when it comes back.
Test.
See how a site behaves under traffic, and where it slows.
Secure.
Find the gaps before a security review does.
One dated report. Written so anyone can read it.
Every test ends in a PDF with the measurements and what they mean. The summary is written by AI from the test's own results, so each sentence points at a number you can check.
Security assessment
Sample reportExample site
Overall grade
88 / 100
High
0
To fix
3
Passing
24
AI summary
Solid fundamentals: 88 out of 100, no high-severity issues, 24 checks passing. The three items holding it back from an A are hardening, not holes. Tightening the Content-Security-Policy closes the main cross-site-scripting gap; the two missing cross-origin headers (COOP and CORP) add cross-origin isolation.
What to fix first
- Content-Security-Policy allows unsafe-inline and unsafe-evalhardening
- Cross-Origin-Opener-Policy header is missinghardening
- Cross-Origin-Resource-Policy header is missinghardening
An automated assessment, not a penetration test.
We only test what you have verified you own.
It cannot be aimed at anyone else
Load tests and scans run only against sites whose owner added our DNS record.
Every test was authorised
The report you hand over comes from a test the site's owner allowed.
It stops if your site struggles
A resilience campaign runs inside a user ceiling and a daily time budget you set. The site is checked before every burst, and a burst is stopped automatically if the site shows distress.
What it is not: a security scan is an automated assessment, not a penetration test, and a resilience run is not disaster-recovery testing. The free checkers need no verification because they only read what a public site already sends to every visitor.
Who it is for. And who the report goes to.
Agencies and freelancers
You look after sites that belong to clients. After a launch or a monthly check, send the client one dated report: the measurements, and a summary they can read without you in the room.
The report goes to
Your client
Small businesses
A customer's security questionnaire asks how the site is tested. A graded scan report shows what was checked, what failed and how to fix it. It is supporting evidence, not a certificate.
The report goes to
Your customer's security review
Developers and small teams
Before a launch, a load test shows the first thing that slows down, with the numbers behind it. The report settles whether the site is ready.
The report goes to
Whoever signs off the launch
Start free. Pay when you need to test.
Free
$0
10 sites, checked every 5 minutes, with alerts by email and webhook. A free account also raises the daily limit on the free checkers.
Pro
$49 a month
₹4,799 a month in India
25 sites, checked as often as every minute. 100 load tests, 50 stress tests and 100 security scans a month, with AI reports and PDFs.
Business
$199 a month
₹19,499 a month in India
100 sites. Cloud tests with up to 1,000 virtual users, deep TLS analysis and resilience campaigns of up to 7 days.
Introductory prices, before GST or VAT. Regular prices are $99 and $399 a month (₹9,699 and ₹38,999 in India).
Questions people ask first.
Will a test harm my site?
Uptime checks and security scans only read what your site shows publicly, and change nothing. A load or stress test sends real traffic: on Pro it is light, at most six connections at once for no more than 90 seconds. A cloud test on Business can be stopped while it runs, and a resilience campaign checks the site before every burst and stops a burst by itself if the site shows distress.
Why must I verify my domain?
A load test sends real traffic and a scan report says what is weak, so neither should be possible against a site that is not yours. Adding one DNS record proves the domain is yours. The four free checkers need no verification, because they only read what a public site already sends to every visitor.
Is the security scan a penetration test?
No. It is an automated assessment: it inspects the headers and configuration your site shows publicly, and grades them. It does not exploit anything or test your application's logic. A penetration test is a separate, human-led engagement, and BCDRPulse does not offer one.
What does the AI do?
It writes the summary. Every number in a report is measured by the test itself, and a scan's grade is worked out from its checks by fixed rules. The AI reads those results and says what they mean and what to fix first, so each sentence points at a number you can check.
What is free?
Uptime monitoring for 10 sites, checked every 5 minutes, with alerts by email and webhook, and no card. The four free checkers work without an account, 3 checks a day with each, and the Down Checker never asks for one. A free account raises the checkers' limit to 60 checks an hour.
How do I cancel?
From your billing page, at any time. Your plan stays active until the end of the period you have paid for. The Cancellation and Refund Policy says how refunds work.
Start with your own sites.
Verify your domain and watch its uptime from the edge, free. Add load, stress and security testing on Pro, and cloud-scale load and stress, deep TLS and continuous resilience testing on Business, whenever you need them.
A note from the founder
I have worked in enterprise backup and data protection since 2007, supporting Fortune 500 companies. Companies of that size have whole teams to answer three questions about a website: is it up, will it hold, and is it safe.
I built BCDRPulse so that the owner of one site, or an agency looking after twenty, can answer the same three questions and hand over a dated report that says so.
It is a young product, and each product's page says what it does not do. If something here is wrong or unclear, write to support@bcdrpulse.com.
Bhalendu Chaubey
Founder, BCDRPulse · About BCDRPulse