Website malware detection
Some website malware cannot be seen in the page source. It redirects only certain visitors, runs after the page has loaded, or appears only after a search click. ScanTitan combines content inspection with a bounded look at how the landing page and its scripts behave in an isolated browser, and compares visitor scenarios to find suspicious redirects, downloads and other signs of compromise.
Start with a free account: one website and one included website security scan. Registering does not activate paid features.
Create free accountSee the visitor scenariosA scanner that downloads one copy of a page and reads its source sees only what the server chose to send that one time. Compromised websites are often built to avoid being noticed. They show a clean page to the owner and to crawlers, and attack other visitors.
Behavioral malware detection adds the missing view: what the page does in a browser, and whether that changes with the visitor.

The scenarios describe who is visiting, not five different browser engines.
A new visitor on a desktop browser.
A new visitor on a phone.
A request that looks like a search engine crawler.
A visitor who has been to the site before.
A visitor who arrives from a search result.
Malware that behaves differently for these visitors can be compared across scenarios. A page that only changes its layout for a phone is a responsive design, not malware, and is not reported as one.
Create a free account to run the included website security scan. Website plans also include weekly malware monitoring on Free, Professional and Business, and Professional and Business add repeat scans. Consultant is built for assessing client sites and does not include ongoing monitoring.
Read the full website malware scan page, analyse a suspicious file with the Malware Code Analyzer, compare plans and prices, or see the Consultant plan for client assessments. The wider website vulnerability scanner covers vulnerabilities as well as malware.
It checks what a website does, not only what its source contains. ScanTitan inspects the page content and watches the landing page in an isolated browser for redirects, injected content and downloads.
Desktop first visit, mobile first visit, crawler-like visit, returning desktop visit and search referral. They represent different visitors, not different browsers.
Observing several visitor scenarios helps reveal behavior that depends on the visitor. It does not cover every possible audience.
The browser observation is bounded to the landing page and a limited time after load. It does not promise to catch every delayed behavior.
No. The Free Malware Scan is a limited 45-second public sample. The full browser assessment runs as part of a website scan on your account.
No. It means the checks that ran found nothing. Areas that could not be checked are reported as unchecked.
Responsive design shows different layouts to different screens. Only suspicious redirects, downloads, injected content and similar behavior are reported.
Create a free account to run the included website security scan and see what the assessment observed.
Create free accountCompare plansThese ScanTitan features work alongside this one.