About ZNIMOK

The name

Znimok (знімок) is Ukrainian for “snapshot”. A ZNIMOK check is exactly that: a dated picture of what your website shows to the internet at one moment. Results change when your site changes, so a report always carries the time of the check.

What ZNIMOK does

ZNIMOK is for website owners, agencies and developers who want to know what their site exposes and what to tell the person who maintains it.

You enter a domain and get a report link. The report covers subdomains, TLS, mail records, security headers, exposed files and panels, and software versions matched against public vulnerability data. Every finding says what we saw, why it matters and what to do. The full list is on What we check.

• The free check works for any public website and needs no account.
• A free account lets you verify that a site is yours. On a verified site ZNIMOK also runs active checks, such as a port scan and a deep API audit, and only verified owners see their results.

How we work

• Findings come from fixed rules and public databases such as NVD, OSV, CISA KEV and FIRST EPSS. No AI model writes or reviews a report.
• A software version that matches a known vulnerability is reported as a possible risk that needs checking, never as proof that a site was hacked.
• The report shows what could not be checked. Missing coverage is labelled, not counted as a pass.
• We do not promise that a site is secure. An outside check sees only what is visible from the internet.

Responsible scanning

The details, including how our requests identify themselves, are on How our scanner works.

• The free check reads public sources (DNS, certificate logs, domain registries) and sends ordinary GET and HEAD requests to the site. No exploits, no password guessing, no logins.
• Requests run at low concurrency with pauses, and the check backs off when a site rate-limits or challenges it.
• Active checks, which go beyond GET and HEAD requests, run only on sites whose ownership is verified with a DNS record, a file or a meta tag, and only the verified owner sees their results.
• Site owners who do not want their domain checked can email security@znimok.com from an address at that domain. We handle each request by hand and reply.

Contact

Security questions, a report about a vulnerability in ZNIMOK itself, or a request about checks of your domain (please write from an address at that domain): security@znimok.com. We handle each request by hand and reply. The same address is listed in our security.txt file.

Questions about personal data: see the privacy policy.