Not built yet. This describes what a paid tier would do. Nothing here is for sale today and there is no signup — the page exists so I can find out whether anyone actually wants it before spending months building it.
The problem the free tool does not solve
One audit tells you what is wrong today. It does not help you six months from now, when someone asks you to prove the ruleset was reviewed — which is what PCI DSS 1.2.7 requires, twice a year, per device.
And it does not scale sideways. Auditing one firewall by pasting a config is fine. Doing that for fifteen client sites, remembering which was last checked in March, and producing something each client will accept, is a different job.
What the paid tier would add
- Saved audit history
- Every audit kept, per device, so the six-month review has an evidence trail behind it.
- Drift against the last snapshot
- What changed since the previous audit — rules added, rules loosened, findings that appeared. This is the part that is genuinely impossible to do by hand.
- A report you can hand to a client
- PDF with your logo, your firm's name, the reviewer's name and a signature block. The deliverable, not a screenshot of somebody else's tool.
- An exception register
- Findings you have accepted, with an owner, a reason and an expiry date, so they stop reappearing at the top of every report and start expiring on schedule.
- Review-cadence tracking
- Which sites are due, which are overdue, across every client you carry.
What would not change
- The audit engine stays free, unlimited and without an account. It is not a trial and it will not become one.
- Configurations still never leave your browser. Even in a paid account, the plan is to store findings, and to store the configuration text only as a blob encrypted with a key your browser holds and the server never sees.
Roughly what it would cost
Somewhere between $49 and $149 a month, depending on how many devices and client workspaces you need. Card payment, no sales call, cancel from the settings page.
For comparison, the established tool in this space is quote-only and averages around $2,600 a year, with a minimum licence most small firms find larger than they need.
Would you use this?
If you would, the useful thing you can do is simply to have read this page — I can see how many people get here from the audit tool, and that is the signal I am looking for.
If you want to say something more specific — a feature that matters more than the ones above, or a reason this would not work for you — I would rather hear it now than after building the wrong thing.